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SECURITY 
CHALLENGES 
TAKE TOLL 


Windows XP still 


Threat will be high 


under scrutiny | in 2002, experts say 


BY CAROL SLIWA 
Differences of opinion contin- 


BY JAIKUMAR VIJAYAN 
The increased use of video- 


ue to swirl over a potentially | conferencing and Internet col- 


problematic Universal 
Plug and Play service in 
Microsoft Corp.’s Win- 
dows XP operating system. 

The FBI's National 


structure Protection Center 


last week revised a recent se- | 


curity bulletin, removing a rec- 
ommendation that systems ad- 
ministrators consider 


abling the UPnP service in | 


Windows XP. 
After “careful 
technical materials, 


review” 
the 


UCITA CHANGES 


NEWSPAPER 


FAIL TO APPEASE 


But opponents welcome 
ban on remote disabling 


BY PATRICK THIBODEAU 
WASHINGTON 

The drafters of the controver- 
sial UCITA software licensing 
law have done an about-face 


dis- | 


of 
FBI | 
Windows XP, page 16 | 


laboration technolo- 
gies, the rush toward 
Web services, and an 


| emerging class of malicious 
Infra- | 


code that blends virus and 
wormlike capabilities repre- 
sent some of the biggest secu- 
rity challenges for 2002, ac- 
cording to analysts. 

As was the case last year, 


users can also expect to see a | 


sharp increase in the number 
of macro and script viruses that 
emerge. But major antivirus 

Security Threat, page 16 


| on some of its key provisions, 
| including recommending a ban 
} On remote 
| by software vendors. But the 
| changes don’t appear to go far 
| enough to win support from 
| businesses fighting state-by- 


system shut-offs 


state adoption of the measure. 
“These changes are 


| meaningful. They are more 
real | 
Mc- | 
Donald, an attorney at Princi- | 

UCITA, page 53 | 
European 


dressing than 
said Elaine 


window 
substance,” 
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yond Bleak 


More layoffs. Fewer hires. Disappearing perks and bonuses. 
According to our annual hiring forecast, IT workers and 
job seekers can expect even more bad hiring news in 2002 
as companies brace for continued staff reductions. And 
don’t expect relief anytime soon, as the debate 


Way 


The first ina 
series of articles 
on how to get 
hired, or stay 
employed, in 
today’s turbulent 
IT job market. 


rages over whether this is the worst IT job 
market in a decade, or ever. On a more uplifting note, IT man- 


agers will maintain current salary levels and invest in training. 


Part one of this series begins on page 30. 





System resources take a 
beating; key tests ahead 


BY LUCAS MEARIAN 
Union 


experts suggested that the real 
remains ahead for 
applications, 


ac- 
counting 


TT HIT HARD IN EURO CURRENCY SHIFT 


not | 


| chines and debit 


card with- 


| drawals hit record levels in the 


| rency swap in 12 of the 15 mem- | 
| ber nations of the European 


banks said | 
| they were pleased with the 12- | 
| nation conversion to the new 
} euro currency last week. But 


data- | 


bases, spreadsheets and other | 


business systems. 
The long-anticipated 


cur- | 


Union began Jan. 1. Despite 


rency stressed the IT systems 

behind the conversion. 
Europay Internation- 

al in Waterloo, 

Belgium, the 

leading Euro- 

pean electron- 

ic-payments ; 

group, said auto- \ 

mated teller ma- §™ 


| years of planning, the scale of | 
| the final switch to a single cur- | 


first 24 hours after the euro’s 
release. 

Electronic authorizations by 
Europay were up 30% over the 
same period last year; two- 
thirds of those transactions 


| were ATM withdrawals. Some 


| ATM 


systems ran out of 

money. And in Austria, 2,600 

ATMs shut down for an 

hour due to a sys- 
tem overload. 

But, said Eu- 
ropay spokes- 
woman Cheryl- 

Euro, page 53 
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Delicious eBusiness Infrastructure Management Solutions 
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NO MATTER WHAT 
YOUR INFRASTRUCTURE 
MANAGEMENT NEEDS ARE, 
WE HAVE SOLUTIONS 
: THAT WILL SATISFY : 
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Unicenter 


THE BEST INFRASTRUCTURE MANAGEMENT SOFTWARE. 
AVAILABLE A LA CARTE. BON APPETIT. 


In infrastructure management, no two appetites are alike. That’s why Unicenter lets 
you choose only the components you need, just when you need them. Of course, it’s 
also still available prix fixe. Regardless, the individual elements will work together 
seamlessly. So you can build end-to-end infrastructure management solutions for 


your business without biting off more than you can chew. 


Computer Associates™ 
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Has too much data put you ina eer mood? Store Smarter.” 


4?éhive 


Active Archive Solutions:” The intelligent way to optimize database performance. 

Tight budgets and an even tighter database. Feeling squeezed? Weli, while everyone else is buying more hardware, 
the smart ones Store Smarter with Princeton Softech’s Active Archive Solutions” Active archiving sets aside 
infrequently used data to make room in your database, yet keeps it “active” for easy access. It’s the cost-effective 
way to reduce database overload and improve performance. So give yourself some space. 

Store Smarter. Call 800.457.7060 or visit www.storesmarter.com. 


2002 Princeton Softech inc. All rights reserved 
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NEWS 6 


6 Major banks back technology 
that promises to enable the clear- 
ing of payments in one day instead 
of the three needed now. 


7 Public-access wireless LAN 
availability gets a boost from a 
Sprint-backed start-up. 


8 Security experts warn that both 
the public and private sectors need 
to do more to prevent a cyber- 
attack on the nation’s critical 
infrastructure. 


10 The WorldWide Retail Ex- 
change raises eyebrows with an 
integration strategy that calls for 
two vendors to share the work. 


12 Home Depot undertakes a 
massive remote desktop-manage- 
ment project to centralize control 
of its retail-floor terminals. 


For breaking news. 
updated twice daily, 
visit Computerworld.com 


www.computerworld.com/q?q4000 





ANTICIPARALLELISM 


Most computers are idle most 
of the time, but in this week’s 


Future Watch, we learn that 


CA researchers are finding ways to 
harness that wasted power and 
anticipate users’ needs. PAGE 43 
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BUSINESS = 29 


25 Paul A. Strassmann contends 
that [T-to-revenue benchmarks 
aren’t necessarily the best ap- 
proach to gauging the effective- 
ness of your tech spending vs. the 
competition’s, since correspond- 
ing financial and employment 
structures are often different. 


28 Real options reasoning, a 
methodology used by the oil and 
gas industry to predict capital 
equipment costs for new drilling, 
can help managers gauge potential 
returns on IT investments. 


34 Helping customers figure out 
what they need is better than just 
giving them what they want, argues 
Anthony W. Ulwick, who wrote 

an article on the subject in this 
month’s Harvard Business Review. 


38 Career Adviser Fran Quittel 
offers advice to a laid-off business 
analyst who’s considering return 
ing to college to complete his four- 
year degree. 


TECHNOLOGY 39 


39 Network computing will see 
an upsurge in 2002, especially from 
IBM and Sun, predicts columnist 
Nicholas Petreiey. 


40 Instant messaging in the 
workplace gets mixed reviews. Is 
it a quick, useful communication 
tool that improves efficiency or an 
annoying distraction? 


42 QuickStudy: Perl is an open- 
source scripting language whose 
syntax is similar to that of C. Learn 
more about it in this week’s tutorial 


44 Security Journal: When an 
operations manager chooses to 
ignore security vulnerabilities, se- 
curity manager Mathias Thurman 
must decide whether to confront 
the manager or let the matter drop. 


46 Emerging Companies: Fine- 
Ground’s Condenser speeds dy- 
namic Web page loading by trans- 
mitting to users’ browsers only the 
page changes since previous views. 


RECESSION? 
WHAT RECESSION? 


In spite of all the talk about an 
economic downturn, the Inter- 
net is revolutionizing companies’ 
supply chains and improving 
industrial productivity, argues 
PricewaterhouseCoopers’ 


Grady Means. PAGE 37 


OPINIONS © 22 


2 Patricia Keefe says businesses 
can make great gains in their on- 
line channels by investing in cus- 
tomer service. 


22 Pimm Fox writes that some IT 
is mission-critical, but most isn’t. 
That means most technology 
should be judged on price and 
performance. 


23 David Foote says it’s not all 
doom and gloom for IT profession- 
als as the new year begins. There 
are plenty of trends and new devel- 
opments that could yield bona fide 
long-term career opportunities. 


i Frank Hayes proactively offers 
some clarifications and corrections 
regarding his yet-to-be-published 
columns on timely IT news items. 


Editorial/Letters 22, 23 
How to Contact CW 52 
Company Index 52 
Shark Tank 54 
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LOOKING FOR FRAUD 


Jeff King, product management 
director at CyberSource Corp. in 
Mountain View, Calif, offers tips on 
spotting potential online fraud. 
www.computerworld.com/ecommerce 


SHE'D RATHER HAVE 
HER PAPER PLANNER 


Community member Karen Black 
explains why she wants to lose her 
personal digital assistant and find 
a pencil and paper. 
www.computerworld.com/wireless 


COPING WITH 
THE DOWNTURN 


fell us how the current job market 
is affecting your career, and read 
what others have to say in our 
careers discussion forum: 
www.computerworld.com/q?a1420 


NEWSLETTERS FOR ‘02 


Would vou like to receive free 
Computerworld e-mail newsletters 
on IT in manufacturing? Retail? 
Finance? Government? These 

are just a few of the topics we're 
considering for 2002. Cast your 
vote at the bottom of our subscrip 
tion page: 


www.computerworld.com/q?a1430 











Dow Signs EDS to 
Expand IP Network 


Piano, Texas-based Electronic Data 
Systems Corp. announced a six- 
year contract to expand an integrat- 
ed voice, video and data network 
it’s building for The Dow Chemical 
Co. in Midland, Mich. The deal calls 
for EDS to extend the IP-based 
DowNet network to facilities that 
Dow bought last year as part of two 
acquisitions. 


Vendor Group Starts 
Piracy Grace Period 


The Business Software Alliance, a 
Washington-based antipiracy group 
organized by Microsoft Corp. and 
other vendors, announced a month- 
long grace period that gives compa- 
nies in seven metropolitan areas a 
chance to pay for unlicensed soft- 
ware they’re using without being 
charged penalties. The locales being 
targeted include the San Francisco 
Bay area, Houston and Orlando. 


VeriSign Proposes 
Domain Waiting List 
Mountain View, Calif.-based 
VeriSign Inc. said it’s working with 
SnapNames.com Inc. in Portland, 
Ore., to develop a waiting list ser- 
vice that would let companies line 


up to grab .com and .net domain 
names that aren't renewed by their 


| 
| 


| 
| 
| 
| 





| tems would establish 
| authentication 


| standard 


current owners. VeriSign sent a pro- | 


posal for the service to domain 
name registrars last month. 


AMD Readies Faster 
Athlon Processor 


Sources said Advanced Micro De- 
vices Inc. in Sunnyvale, Calif., plans 


NEWS 


Banks’ Project to Speed 
Payment Processing 


More than a dozen institutions backing 
what could become an industry standard 


| BY LUCAS MEARIAN 


OME OF THE WORLD'S 
largest banks 
backing a proposed 
industry standard 
that promises to se- 


are 


cure business-to-business pay- | 
| ments over the Internet and | 
| bolster straight-through pro- 


cessing (STP), or the ability to 


| clear payments in a single day 
| instead of the three days need- 
| ed now. 

Dubbed Project Eleanor, the | 
| proposed standard and its soft- | 


ware for linking back-end sys- 


methods for 
banks and vendors and create 
database fields for 
computer-to-computer trans- 


actions. It’s expected to be in | 
| place by mid-2002. 


Identrus LLC, a New York- 
based vendor formed by a con- 


| sortium of banks that has been | 
public-key-infra- | 


AIM Vulnerability Highlights 


building a 
structure-based global system, 


| has assumed ownership of Proj- 
| ect Eleanor, which was origi- 


nally a joint venture of several 
financial institutions. 
ABN Amro Bank NV in Am- 


| sterdam, HypoVereinsbank in | 
| Munich, 
| Bank/UF] in Tokyo and Wells 


Germany, 


Fargo & Co. in San Francisco | 
| are conducting in-house pilots | 
| of Project Eleanor. There’s also 
| a second wave of financial in- 


stitutions that are planning to 


| join the pilot program during 
| the first half of the year. 


Peter Landsmann, director 
of electronic banking services 


| at HypoVereinsbank, said the 


| major costs 


to announce a new high-end version | 
| with older back-end systems. 


of its Athlon XP microprocessor to- 
day, the same day Intel Corp. is ex- 
pected to unveil a faster Pentium 4 
chip (see related item, page 10). 
The 1.67-GHz Athlon XP 2000+ wili 
be AMD's fastest processor for use 
in desktop PCs. 


associated with 
Eleanor will involve integration 


But it will be worth it, he said. 
“This will mean more 
straight-through processing for 


| all the different participants: 


buyers, sellers and banks,” said 
Landsmann, who estimated 


online | 


Sanwa | 


| Flaw fixed but has 


major implications | feature of AIM Version 4.7 that 


| that integration would cost his 
| bank 


than $10 million. 
“Eleanor will offer risk manage- 
ment, timely information and 
integration into back-end sys- 
tems, thereby streamlining pro- 
cesses,” he added. 


less 


Agent of Change 
Wells Fargo has already in- 
stalled Project Eleanor’s soft- 


ware from Sun Microsystems | 
| Inc.’s iPlanet E-Commerce So- 


lutions on independent servers. 
The bank plans to begin a six- 
month pilot next month. 

Jane Hennessy, a senior vice 
president at Wells Fargo, said 


| that what attracted her compa- 


ny to the project was that pay- 
ment terms can be built into 
the software and it has identifi- 
cation authentication from 


| Identrus. 


“This could result in much 





greater control of cash flow. 
We'll be able to do transactions 
online without having to go off- 
line for payment initiation,” she 
said. “I think it would change 
things dramatically for our cus- 
tomers, particularly those do- 
ing international transactions.” 
According to Needham, 


Mass.-based TowerGroup, the 


global securities industry will 
spend $19.2 billion on STP 
projects between now and 


| 2004. Global banks are making 
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heavy investments in an STP 
standard because a single pay- 
ment and clearing standard 
would simplify conversion to 
local currencies and adherence 
to local regulations. That’s be- 
cause transaction rules would 
be built into software by in- 
country vendors or banks. 

“The point is that current- 
ly, over-the-Internet compa- 
nies first [make a sale] and 
then go off-line to close the 
deal and do the clearance us- 
ing their respective software,” 
Landsmann said. “You have 
two work streams: the pur- 
chasing work stream ... and a 
payment work stream. With 
Eleanor, all of this can happen 
| inone process.” D 





on it a 
Project Eleanor’s Global Supporters 


Pacific Rim: Australia and New Zealand Banking Group Ltd., 


Bank of Tokyo-Mitsubishi Ltd., 


Industrial Bank of Japan Ltd., 


National Australia Bank Ltd. and Sanwa Bank/UF] 


Europe: ABN Amro Bank NV, Barclays Bank PLC, BNP 
Paribas, Banco Santander Central Hispano, HSBC Holdings 
PLC, HypoVereinsbank, Royal Bank of Scotland/Natwest and 


Societe Generale Group 


North America: canadian Imperial Bank of Commerce and 


Wells Fargo & Co. 





Risk of Rushing Features 


| BY JAIKUMAR VIJAYAN 
The buffer overflow vulnera- | 
| bility discovered last week in 
| the latest version of America | 
Online Inc.’s popular AOL In- | 
| stant Messenger (AIM) chat 


software shows how the rush 


to add new functionality to 


| products continues to compro- | 
| mise security, analysts said. 


Dulles, Va.-based AOL scram- 


| bled to fix a flaw in its AIM 


software that could let mali- 
cious attackers take remote 
control of a victim’s system. 
Late last week, the company 


lets 
| members to play online games 


developed a patch that ad- | 


dressed the problem. 

The vulnerability involved a 
users invite other AOL 
with them, said Matt Conover, 
a founding member of wOOw00 
Security Development, the on- 
line security research group 
that discovered the flaw. 


The vulnerability was the re- | 
sult of an overflow in the code | 


that handles a game request, 


| according to Conover. An at- 


tacker could exploit the weak- 
ness to take control of a vic- 
tim’s system and then down- 
load and execute a malicious 
file from the Internet. 

Conover described the vul- 


nerability as “fairly difficult to 
exploit.” But its implications 
are huge “and leave the door 
wide open for a worm not un- 
like those that Microsoft Out- 
| look, IIS, et al. have all had,” 
| wO0w00 cautioned. 

Conover said that all Win- 
dows AIM users were vulnera- 
ble. Since the flaw wasn’t relat- 
| ed to the chat features, no prior 
conversation or authorization 
was required to exploit it, he 
noted. 

The incident points to the 
problems that can arise when 
companies rush to add new 
functionality without fully 
testing it, said John Pescatore, 
an analyst at Stamford, Conn.- 
based Gartner Inc. 

Within the past few months, 
almost every major vendor has 
had to acknowledge buffer 
overflow problems, which are 
often the result of basic pro- 
| gramming errors, according to 
Pescatore. D 
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NEWS 


Start-up Advances Public Access Wireless LAN Prospects 


Hopes to boost Wi-Fi interest nationwide | 


BY BOB BREWIN 
In the past year, Sky Dayton, | 
founder of EarthLink Inc., has 
been looking for what he calls 
“the next frontier of the Inter- 
net.” Now he thinks he has 
found it in the development of 
what he says will be the first 
company to offer easy access | 
and subscriptions to public ac- 
cess wireless LAN 
around the country. 

Dayton, who serves as chair- | 
man of Atlanta-based Earth- | 
Link, last month launched 
Boingo Wireless Inc. in Santa 
Monica, Calif. He said the new 
company will serve as a single | 
point of contact and service for 
the fragmented public access 
wireless LAN market, much as | 
EarthLink replaced the frag- 
mented Internet service pro- | 
vider model of five years ago 
with a nationwide footprint. 

Dayton also said the mobile 
data networks of the future 
will be a combination of high- 
speed wireless LANs and 
medium-speed wide-area cel- | 
lular networks. Cellular opera- | 
tor Sprint PCS Group has 
bought into this idea, making 
an undisclosed investment in | 
Boingo. 

Bill Blessing, senior 
president for business devel- | 
opment at Kansas City, Mo.- 
based Sprint PCS, said his | 
company wants to offer “data | 
to mobile users wherever they | 
are, and in some places, that | 
will be through wireless 
LANs.” Blessing said Sprint 
PCS views its investment in 
Boingo as a chance to extend | 
high-speed data services to | 
users over Wi-Fi (802.11b) data | 
networks and considers public 
LANs as a | 
mobile | 


vice 








wireless 
stimulant” to 


access 
“great | 
data usage. 

Blessing said Sprint PCS is | 
also exploring the develop- | 
ment of a dual-mode data card | 
that would let users easily | 
switch from Wi-Fi networks, | 
which offer 10M bit/sec. of 
throughput in locations such | 


networks | 


| 600-plus IT workers 


as hotels and airports, to the 
company’s cellular network, 


which will eventually offer | 


144M bit/sec. of throughput to 
mobile users. 

Sprint PCS isn’t the first cel- 
lular carrier to dip into the 
public access wireless LAN 
market. VoiceStream Wireless | 
Corp. in Bellevue, Wash., last 
week was nearing completion 
of an agreement it submitted 
to a bankruptcy court to pur- 
chase Richardson, Texas-based 
MobileStar Network Corp. 


A Blend of Services 


Boingo doesn’t own or oper- 
ate any public access wireless | 


LAN networks. Instead, Day- | 





ton said, it will serve as an 


ATA GLANCE 


About Boingo 


| w Start up has signed agreements with ser- 


vice providers offering 10M bit/sec. Wi-Fi 
service at 750 public access points across 
the country 


w Boingo software automatically “sniffs 


| out” public access networks and offers 


ation for multiple providers 
§ Software also features a built-in virtual 
private network. 
@ Pricing ranges from $7.95 for one 24 
hour session to $74.95 per month for 


| unlimited access 


amalgamator of services 


| ready offered by companies 


such as Wayport Inc. in Austin, 
Texas, which provides airport 


public access networks, or Surf | 
| corporate users. It eliminates 
| the need to subscribe to myriad 


and Sip Inc. in San Francisco, 
which offers Wi-Fi service for 
independent coffee shops. 


PacifiCare Outsources IT 
Operations to IBM, Keane 


will transfer from | 
HMO to vendors | 


BY BOB BREWIN 
Medical services provider | 
PacifiCare Health Systems Inc. | 
last week announced plans to | 
outsource its IT operations to 
IBM and software consulting 
firm Keane Inc. in separate 10- | 
year deals valued at a com- 
bined total of about $1.2 billion. 
PacifiCare said it expects to | 
save between $380 million and 
$400 million in IT costs over | 
the life of the outsourcing con- | 
tracts. The agreements include | 
a planned transfer of 600-plus | 
IT workers from the Santa 
Ana, Calif.-based health main- | 
tenance organization to IBM | 
and Boston-based Keane, ac- 
cording PacifiCare spokesman | 
Dan Miller. 
PacifiCare 


has 3.6 million 


| deal 


} comment 


members and provides man- 


| aged health care services for 


corporate insurance plans and 
Medicare beneficiaries in eight 
Western states and Guam. The 
company said the outsourcing 
move is part of a wider cost- 
cutting program that includes 
the elimination of about 1,300 
jobs, or 15% of its workforce. 
IBM will manage Pacifi- 


| Care’s IT infrastructure in a 


that’s expected to be 
worth more than $761 million, 
according to IBM _ spokes- 
woman Nancy Kaplan, who 
said she couldn’t disclose de- 
ails on the functions that IBM 
will handle for PacifiCare. But, 
she added, “in a typical out- 
sourcing contract, we take 
over data center operations, 
manage the voice and data net- 
work and provide help desk 
services and PC support ser- 
vices.” 
Kaplan also declined to 
on how many of 
PacifiCare’s IT staffers will 





| authentication 
| public networks and features a 


| ed to 








Boingo intends to sign up 
other Wi-Fi public access op- 
erators to its service as they 


| emerge, eventually establish- 


ing a nationwide footprint, 


; Dayton said. He added that 
| Boingo could serve as a stimu- 
| lus for the nascent market by 


driving traffic — and hence 


| revenue — to its partners. 


Boingo offers users one-stop 
shopping for wireless LAN 


| service through software that 


sniffs out public access net- 
works, including the free Wi-Fi 


| networks that have started to 
| pop up in major cities. 


Boingo’s software handles all 


on disparate 


built-in virtual private network 


client, a key requirement for 


public access networks, with 


| be shifted to IBM. However, 


Keane spokesman Larry Vale 
said that between 250 and 275 
PacifiCare workers are expect- 
transfer to his firm, 
which will assume manage- 


| ment of the HMO’s applica- 
tion maintenance and develop- 


ment work. 
PacifiCare currently has an 
agreement in principle with 


| Keane. Vale estimated that the 


final deal will have a value of 


| $450 million to $500 million 


and said that the PacifiCare 
employees who will be put on 


» The HMO has signed a pair of 
10-year contracts, expected to be 
worth a total of about $1.2 billion, 
with IBM and Keane. 


> IBM will manage PacifiCare’s 
iT infrastructure, and Keane will 
take over application development 
and maintenance. 


> More than 600 PacifiCare !1 
workers will be shifted to the two 
outsourcing vendors. 


| relocate 


| sourcing program 


its single service and pricing 
model providing access to a 
growing number of 
providers (see box). 

A beta version of Boingo’s 
software is available as a free 
download at www.boingo.com. 
It’s due for final release later 
this month. 

Alan Reiter, an analyst at 
Wireless Internet & Mobile 
Computing in Chevy Chase, 
Md., called the founding of 
Boingo a “significant develop- 
ment” in the public access 
wireless LAN _ marketplace. 
The company could replace to- 
day’s “hodgepodge of net- 
works with a shaky financial 
structure” and offer the kind of 
truly national service needed 
to attract the interest and dol- 
lars of market professionals, 
said Reiter. D 


. ° 
Wy *k For more news and 
nc resources, visit Our 

| Ini ‘OQ Mobile and Wireless 


Knowledge Center 
www.computerworld.com/q?ki000 


service 


| Keane’s payroll won't have to 


from the facilities 
where they now work. 

Miller wouldn’t provide fur- 
ther specifics on the outsourc- 
ing plans. Howard Phanstiel, 
PacifiCare’s president and 
CEO, said in a statement that 
the restructuring and out- 
“furthers 
our efforts to operate as a sin- 
gle company under a uniform 


| business model and technolo- 


gy platform and reduces our 


| cost of doing business.” 


But Mark Anderson, a health 
care IT analyst at Anderson 
Consulting Group Inc. in 
Spring, Texas, said he’s skepti- 
cal about whether PacifiCare 
can get the full cost savings it 
envisions from the outsourc- 
ing deals. 

The IT budgets of most 
health care organizations and 
hospitals “are a little high for 
the amount of work they get 
done,” Anderson said. Howev- 
er, he added that he has “never 
seen an outsourcing agree- 
ment save a lot of money for 
an IT department” in the 
health care industry. 

PacifiCare said the deals 
will result in a fourth-quarter 
pretax charge of $60 million. D 








~ NEWS 


Critical Infrastructure Systems 


Face Threat of Cyberattacks 


Officials: Security holes need to be fixed 


BY DAN VERTON 
5 THE four-month 
anniversary of the 


most devastating | 


surprise attack 


on the U.S. since | 


Pearl Harbor approaches, na- 
tional security experts are be- 
ginning to piece together a 
puzzle that nobody wants to 
see completed. 
Had _ the 


terrorists that 


struck on Sept. 11 been able to | 


launch a simultaneous cyber- 
attack against the nation’s crit- 


ical private-sector infrastruc- | 


ture, the ripple effect of the ini- 
tial attacks could have been far 
more devastating, experts said. 


The attacks “could have been | 


the nation’s 


cyberattack 


harder on 


had a 


a lot 
economy 


accompanied them,” Bill Crow- | 
ell, CEO of Santa Clara, Calif.- | 
| sive” to the effort to protect 
| key systems, others, such as 


based Cylink Corp., said last 
week. Crowell, a former deputy 


director of the National Securi- | 


ty Agency, added, “We were 
just lucky that these guys were 
so focused on this one gigantic, 
horrible event.” 

Jeff Morris, a member of the 
Washington State House of 
Representatives, the 


The Grim Reality 


said 


| government and private busi- 


| ACall to Action 


events of Sept. 11 should be 
enough to make every state | 
ness begin to think about the 
vulnerability of the computer 
systems and networks that sup- 
port critical infrastructures. 
The nation’s electric power | 
grid, telecommunications net- 
works, gas and oil pipelines, 
and emergency services “were 
built by the private sector for | 
efficiency, not redundancy,” | 
said Morris, who is also presi- | 


| dent of the Pacific Northwest 


Economic Region (PNWER), a | 
partnership formed between 
the governments and business- 
es of five U.S. states and three 
Canadian provinces. 


Although many large compa- 
nies have been “fairly respon- 


some small telecommunica- | 
tions firms, are just now open- | 
ing their eyes, said Morris. “It 
never occurred to them that 
the power grid might fail be- 
cause there’s no natural gas,” 
said Morris, referring to the 


fact that natural gas powers 


many of the generators that 
produce the nation’s electricity. 


“The reality is that some | 


companies didn’t even have a 


security officer on staff before | 
| Sept. ll,” he said. “It would 


have been far worse if a cyber- 
attack had occurred.” 


berta, for example, could have 
created a ripple effect through- 


bicoastal emergency. 


Canada supplies most of the 
natural gas and a large percent- | 
age of the electricity consumed | 
in the U.S. The loss of one spe- | 


cific core switching station, the 


identity of which can’t be dis- | 
reasons, | 


closed for security 
could severely impact the flow 
of natural gas in the U.S., said 
Matt Morrison, vice president 


| of PNWER. The same is true 
for power plants in the Quebec | 
| area, which provide critical ser- | 


vices to the northeastern U.S. 


The PNWER plans to hold a | 


second infrastructure protec- 


tion planning conference in | 
| Seattle in March, following one 


held in November. The goal 
is to create a list of the most 
important systems and the im- 
pact on the region if they were 


to fail due to an attack, said | 


The vulnerability of critical infrastructure has been demonstrated repeatedly in recent years. 


A Swedish man, working 
from his home in Goteburg, 
disables portions of the U.S 
emergency 911 system in 
southern Florida 


A teenager whose name is withheld 
by authorities is charged with hacking 
into an FAA control tower at Massa- 
chusetts’ Worcester Airport and dis- 
rupting vital systems for six hours. 


Terrorist attacks bring down the World 
Trade Center towers in New York, killing 
thousands, knocking out critical financial 
transaction networks and causing an 
overload of the telecommunications grid 


arctan | 


Such a | 
disruption at power plants in | 
| the Canadian province of Al- | 


IRA terrorists try to 
bomb six National Grid 
Group substations, 
which would have cut off 
all power to London 

Had the plot succeeded, 
it would have crippled 
transportation, emer- 
gency services and vital 
computer links 


An NSA team of 35 
hackers conducts a 
Classified exercise 
called Eligible Receiver 
to demonstrate their 
ability to shut down the 
U.S. electric power grid 
and portions of the Pen- 
tagon’s command and 
control network. 


The California energy crisis 
forces rolling blackouts through- 
out the state, raising concerns 
that multiple cyberdisruptions 
could cause cascading outages 


Morris. Moreover, PNWER 


| plans to deploy software devel- 


oped by the Argonne National 
Laboratory in Argonne, Illi- 


nois, that would alert state offi- | 


cials to infrastructure failures 
in Canada and predict the im- 
pact on U.S. systems. 

In addition, the states and 
companies involved in PNWER 
plan to form a limited liability 


| corporation to facilitate security 
out the U.S., making Sept. ll a | 


data sharing. The corporation 


Cylink Chief Backs 


When Richard Clarke, the newly 

appointed chairman of President | 
Bush's Critical Infrastructure Pro- | 
tection Board, first proposed cre- 
ating a separate intranet for critical | 
government services and e-com- | 


merce, many in the IT industry 
called the plan impractical. Critics 
said there was no possibility that 
private companies would walk 
away from the Internet. 

That was last May, 
four months before 
Sept. 11 demonstrated 
how vulnerable to dis- 
ruption corporate data 
could be. Now, the 
Bush administration's 
plan to disconnect crit- 
ical government ser- 
vices from the public 
Internet, known as 
GovNet, has a new ally 
in Silicon Valley: Bill 
Crowell, CEO of Santa Clara, Calif.- 
based Cylink Corp. and a former 
deputy director of the National 
Security Agency. 

Crowell is the first high-profile 
CEO from the IT industry to pledge 
full support for GovNet. He has 
even gone so far as to call for the 
private sector to create similar pri- 
vate networks. 

“The GovNet idea has triggered 
an interesting rethinking of net- 
works,” Crowell said last week. 
“Core operations, such as human 
resources and finance, should 
be on private networks and fully 
protected. That gives you defense 
in-depth on mission-critical opera- 
tions. The mad rush to put all of 


CROWELL: Core 
operations should 
be on private nets. 
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| will coordinate with regional 
| emergency management offices. 

Still, the window of opportu- 
nity to fix glaring security 
holes in the nation’s defenses 
| is rapidly closing, said Frank 
Cilluffo, an analyst at the Cen- 
| ter for Strategic and Interna- 
tional Studies in Washington. 

“Bits, bytes, bugs and gas 
will never replace bullets and 
bombs as the terrorist weapon 
of choice,” Cilluffo told the 
Senate Government Affairs 
Committee a month after the 
terrorist attacks. However, 
“while [Osama] bin Laden may 
have his finger on the trigger, 
his grandson may have his fin- 
ger on the mouse.” D 


GovNet Proposal 


these critical things onto the Inter- 
net has been arrested as a bad 
idea.” 

Multinational corporations and 
large financial institutions are al- 
ready moving in this direction, said 
Crowell. It's a matter of building 
high-speed connectivity that can 
survive in the event of a catastro- 
phe and is more difficult for attack- 
ers to break into, he 
said. 

High-speed Asyn- 
chronous Transfer 
Mode networks that 
use link encryption 
are one example of 
such technology. Link 
encryption, some- 
times called link layer 
encryption, is the 
process of encrypting 
information at the data 
link level as it is trans- 
mitted between two points within 
a network. “There's no place to 
get into the network,” said Crowell. 
“It's much harder for an attacker 
to get through all of that switching 


| 
| 
| 





fabric, as opposed to the router 


fabric.” 

There are also economic advan- 
tages to GovNet-like networks, 
he said. “Most companies have 
been living in the T1 world and are 
hoping to move to the T3 world,” 
said Crowell. “We can aggregate 
[network capacity]. T3 has been 
getting a lot cheaper than an equal 
number of Tis. If you move to the 
large pipes, you can get to prices 
below ISP costs.” 





- Dan Verton 





Oracle vs IBM 


Java Development 


«Bring To Front 
Send To Back 


Oracle iB 


Online auction application Online auction application 
zero lines of handwritten code 166 lines of handwritten code 
Source: IBM Web Site 


ORACLE 


Source: http://www-4.ibm.com/software/webservers/studio/preregister.html oracle.com/javacode 
Products tested: Oracle9; JDeveloper Release Candidate, WebSphere Studio 800.633.1072 
Application Developer for Windows Preview. 








dudge to Consider Bid | 
For Microsoft Delay 


The judge presiding over the Micro- 
soft Corp. antitrust case scheduled 
a hearing for today on a request by 
the company to delay behavioral 
remedy proceedings. The nine 
states that have refused to sign a 
settlement proposed by Microsoft 
and the U.S. Department of Justice 
urged Judge Colleen Kollar-Kotelly 
to deny the request to postpone a 
remedy hearing set for March. 


Health Insurer, Perot 
Extend Outsourcing 


Wellesley, Mass.-based medical in- 
surer Harvard Pilgrim Health Care 
Inc. signed a two-year extension of 
an IT and claims services outsourc- 
ing deal with Perot Systems Corp. in | 
Dallas. The two companies said the 
extension is expected to add $110 
million in value to the 10-year, $700 
million outsourcing contract that 

they agreed to in late 1999. 


Intel Set to Launch 
New Pentium 4 Chip 


Sources said Intel Corp. today plans 
to release a 2.2-GHz version of its 
Pentium 4 microprocessor that is 
also the company’s first chip to be 
made using a new manufacturing 
process based on 0.13-micron tech- 
nology. That process is expected to 
let Intel reduce the size of the chip 
while increasing its built-in second- 
ary cache. Intel confirmed that the 
2.2-GHz chip is due out this month. 


Short Takes 


The Bush administration said it’s 
easing restrictions on exporting 
computers to countries such as 
Russia, China, India and Pakistan. 
... Southfield, Mich.-based online 
exchange COVISINT LLC said it’s 
adopting some of the XML stan- 
dards developed by the ebXML 
initiative and Atlanta-based OPEN 
APPLICATIONS GROUP INC. but will 


| an analyst at 





wait for others to mature. 
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Retail Exchange ‘Taps IBM, 


WebMethods for Integration 


Rival tools to be offered to members, but 
analysts say overlap may cause problems 


BY CAROL SLIWA 
HE WORLDWIDE 
Retail Exchange 
LLC (WWRE) an- 
nounced late last 
month that IBM 


| and webMethods Inc. will pro- 


vide integration technology 
that its 59 members may need 
in order to participate in its 
electronic marketplace. 
Although analysts said the 
move showed ongoing prog- 


| ress for the WWRE at the close 


of a year in which many busi- 
ness-to-business exchanges 
struggled, it also raised some 
eyebrows, because products 
from IBM and Fairfax, Va.- 
based webMethods offer some 
of the same functionality. 
“Most organizations would 
not pick two integration ven- 
dors, since it significantly 
complicates the task of imple- 


| mentation,” said Ken Vollmer, 


Cambridge, 
Mass.-based Giga Information 
Group Inc. Citing an example 
of the possible consequences, 
he said insiders told him that 
Oracle Corp. and Commerce 
One Inc. “were tripping over 
each other” working on the au- 
tomobile industry’s Covisint 
exchange until divisions of la- 
bor were established. 

WWRE CIO Don Norman 


said the retail exchange want- 


ed to give its members a choice 


| of integration technologies. “I 


think competition’s healthy,” 
he said. “It brings out the best 


| in everybody that’s competing, 


and it’s to the benefit of the 
WWRE and its members.” 
Norman also noted that IBM 


| has global presence among the 
| exchange’s members, many of 


which “are very committed to 
an IBM architectural strategy,” 
whereas webMethods is still 
“reaching to be global.” 

The Alexandria, Va.-based 





WWRE boasts some of the 
world’s largest retailers as 
members, including Albert- 
son’s Inc., Best Buy Co., CVS 
Corp., Gap Inc., J.C. Penney 
Co., Kmart Corp., Rite Aid 
Corp., Royal Ahold NV, Safe- 
way Inc., Target Corp. and 
Walgreen Co. 

Both IBM and webMethods 
will provide technology to 
support the internal applica- 
tion-to-application integration 


of the exchange’s core product | 


and services platform, as well 
as business-to-business inte- 
gration between the ex- 
change’s applications and its 
members’ internal systems, ac- 
cording toa WWRE statement. 
The rival software products 
also offer business process 
management capabilities. 


| Simplified Integration 


The WWRE said that by de- 


| ploying webMethods and IBM 
| products, it hopes to lower in 


tegration and implementation 
costs, improve collaboration 
among trading partners, sim- 


plify integration and accom- | 
| modate disparate applications 


that its global members use. 
Randy Covill, an analyst at 


| however, 





B28 Tool Box 


The WWRE has used the 
following technologies: 


> Negotiations 
_ and auctions: Ariba Inc. 
. » Collaborative plan- 
* ning, forecasting and 
replenishment: i2 Tech- 
< "nologies thc, 
- » Supply chain 


- »Online 


i2 (Rig Works), 
»>Product design 


_ + Hosting: IBM 


| Boston-based AMR Research 


Inc., said the selection of an in- 
tegration vendor signals prog- 
ress. “It’s not that selecting a 
vendor is a guarantee of suc- 
cess. But if you’re not doing 
that at all, then you can’t ad- 
vance to the next level of ser- 
vices,” Covill said. 

The dual vendor selection, 
has Vollmer con- 
cerned about “the potential for 
key business processes to be 
modeled inconsistently in the 
two different products.” That 
“could lead to a very undesir- 
able situation where the execu- 
tion of a single business pro- 


Pentagon Integrates Procurement Data 


The WWRE isn't the only big orga- 
nization that's turning to webMeth- 
ods for business-to-business inte- 
gration help. The U.S. Department 
of Defense (DOD) last week said it 
will use the software vendor's tools 
to blend product catalogs from on- 
line exchanges with ones from sup- 
pliers that are already plugged into 


its Web-based procurement system. 


By early next month, Pentagon 
employees are due to get access to 
more than 30,000 new suppliers 
through Sunnyvale, Calif.-based 
Ariba Inc.'s Commerce Services 





Network. WebMethods was tapped 
to integrate data between Ariba’s 
network and the DOD's internal 
marketplace and procurement sys- 
tem, called Electronic Mall (EMail). 
Don O'Brien, EMal! program 
manager at the Defense Logistics 
Agency, said DOD workers will be 
able to search for goods using key- 
words, manufacturer names or uni- 
versal product code numbers. The 
webMethods technology will let 
them see all relevant product infor- 
mation on a single screen instead 
of having to separately look through 





cess would yield different re- 
sults for different members,” 
he said. 

Officials at webMethods and 
IBM acknowledged that they 
compete in some areas. “It will 
all come down to execution,” 
said Patrick Condon, senior 
manager of product marketing 
at webMethods. “Everyone 
wants to talk about business 
process management and inte- 
gration, and there’s only a few 
of us who can really do it.” 


Existing Relationship 

The WWRE already has a 
relationship with IBM, which 
hosts the exchange’s applica- 
tions and did the systems inte- 
gration work necessary to get 
the exchange up and running. 
But Norman said the WWRE is 
currently in the final stages of 
transitioning out of that sys- 
tems integration contract. 
“The WWRE is managing its 
own systems integration ef- 
forts, and IBM will be one of 
the partners who will be in- 
volved in that effort,” he said. 

Jan Jackman, vice president 
of strategic business develop- 
ment for IBM’s software group 
said her company will promote 
open-standard interfaces be- 
tween the WWRE’s trading 
partners, as opposed to the 
“proprietary protocols” that 
webMethods uses. D 


multipie online catalogs, he added. 

Online aerospace exchanges, 
such as Reston, Va.-based Exostar 
LLC and Irving, Texas-based Aero- 
xchange Ltd., are due to be added 
to the EMall system in the summer, 
again via the webMethods soft- 
ware. In all cases, O’Brien said, 
data will be boiled down to provide 
easy access for end users. 

“Our main requirement was that 
it has to be absolutely seamless,” 
he said. “Otherwise, people won't 
be able to use it.” The DOD is pay- 
ing webMethods $275,000 for a 
two-year license, O’Brien said. 

- Michael Meehan 
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Home Depot Seeks Remote 


Control of the D 


Retailer plans to use new management 
tools to centralize software updates 


BY MICHAEL MEEHAN 


HE HOME DEPOT 


Inc. has scheduled | 


a major spring im- 

provement project 

in which it plans 

to install a remote desktop 

management system for use by 

help desk workers at its corpo- 
rate headquarters. 

The Atlanta-based retailer is 

looking to gain central control 


of Windows 2000-based inven- | 
tory management and retail- | 


floor terminals that are being 
installed to replace DOS sys- 
tems in its 1,300-plus stores. To 
do that, Home Depot in March 
will start deploying remote 
management software devel- 
oped by Waltham, Mass.-based 
On Technology Corp. 

Mike Anderson, Home De- 
pot’s vice president for infor- 
mation systems, said that by 
year’s end, the company will 
have On ‘Technology’s On 
Command CCM. technology 
running on about 17,000 Win- 


dows 2000 PCs. IT workers 


will then be able to remotely | 
install and update the operat- | 


ing system and applications 
used by the machines. 


also be included on new Win- 
dows systems as the company 
retires its remaining 
workstations. 

90,000 


hopes to have 


2004. He declined to comment 


on how much the project is ex- | 


pected to cost. The company is 
also preparing for a major 
overhaul of some of its core IT 
systems. 

Currently, Home Depot has 
to update and service in-store 
PCs by sending technicians 
into the field or shipping disk 
drives back and forth. 





DOS | 

| measurements 
Anderson said Home Depot | 
PCs | 
plugged into the remote man- | 
agement system by the end of | 


“Now I'll be able to push a | 


button and upgrade Windows 
on terminals out there,” An- 
derson said. 

The technology being im- 
plemented by Home Depot “is 
not very sexy, but it definitely 
is mission-critical,” said Valerie 
O’Connell, an analyst at Ab- 
erdeen Group Inc. in Boston. 

Desktop management is of- 
ten seen as purely an IT func- 
tion, but the Home Depot proj- 
ect should be interesting “be- 
cause I’m sure they’re closely 


Faster Firewall 
‘Transactions, 


J. Crew shortens 
holiday order 
processing times 


BY JAMES COPE 
Although some online retailers 
kept holiday shoppers queued 


| for nearly 15 sec. while their 
The management tools will | 


Web transactions were proc- 
essed, Jcrew.com rang them up 


in an average of just over 4.5 | 


- Online Speed 


sec., according to performance 
conducted by 
Keynote Systems Inc. 

The transaction performance 
achieved by the online unit of 
New York-based J. Crew Inc. 
was partly due to a new fire- 
wall system that the retailer 


had its Web hosting provider, | 


Digex Inc., deploy prior to the 
start of the holiday rush, said J. 
Crew CIO Paul Fusco. 

Based on J. Crew’s experi- 
ence, Laurel, Md.-based Digex 
last week announced that it 
will make the firewall system, 
which is built around technol- 


| tracking the ROI on this,” 
O'Connell said. “If the num- 
bers turn out good, then you 
might see a lot of other compa- 
nies getting interested.” 

But such initiatives are 
“nontrivial undertakings,” she 
added. 


Renewed Interest 

Kurt Schlegel, an analyst at 
Meta Group Inc. in Stamford, 
Conn., said he expects to see a 
resurgence of interest in desk- 
top management technology 
this year. “It was something 
people last cared about leading 
up to Y2k, and they’ve just sort 
of stuck with what they had 
since then,” he said. 








esktop 


But vendors such as On 
Technology, Microsoft Corp. 
and Novell Inc. have made sig- 
nificant upgrades in the past 
few years, Schlegel noted. 

For example, he said, Nov- 


Central Control 
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ell’s ZENworks workstation 
management product is now 
operating-system-agnostic and 
offers imaging tools to help 
users combat bandwidth con- 
straints. 

At Home Depot, the in-store 
PCs will be updated from cen- 
tralized Unix servers. Ander- 
son said help desk workers will 
also be able to remotely take 
control of systems to perform 
troubleshooting or provide sup- 
port to end users. DB 


The benefits that Home Depot expects to get by deploying a 
centralized desktop management system include the following: 


= Automated distribution of operating system and application upgrades to 


inventory terminals in stores 


# One-click disaster recovery and system rebuilds 


The ability for help desk staffers to monitor and operate any PC or server on 


the company’s network 


aT asset-tracking capabilities for capturing data such as what systems are 
installed at different locations and how they're configured 


Helps Retailer Speed Web 


espite Increase in Volume 


| ogy from Espoo, Finland-based 
| Nokia Inc. and Redwood City, 
| Calif.-based Check Point Soft- 
ware Technologies Ltd., avail- 
able as a service to other cor- 
porate users. 
| Although firewalls can help 
to maintain security during 
e-commerce transactions, they 
can also slow down communi- 
cations between shoppers and 


A year-to-year comparison of 
the transaction processing 

« performance on J. Crew’s 
Web site: 


Week of 
Dec. 10, 2000: 
6 sec. to complete a 
transaction, on average 


Week of 
Dec. 9, 2001: 
5 4.23 sec. to complete an 
% average transaction, with an 
increase of more than 30% 
in transaction volume. 








online order processing sys- 
tems, said Matthew Berk, an 
analyst at Jupiter Media Metrix 
Inc. in New York. 

For example, Fusco said, J. 
Crew “ran some simulations 
where we choked our old fire- 
wall.” That result, along with 
projections that more of the 
company’s catalog sales will 
eventually be moved online, 
prompted J. Crew to test three 
new firewall systems last year. 
Fusco wouldn’t name the other 
products tested. 

Fusco said that during the 
latter part of 2001, J. Crew’s on- 
line transaction volume in- 
creased by more than 30% 
compared with the same peri- 
od in 2000. But the company re- 
duced its average transaction 
processing time, according to 
Keynote’s measurements — a 
result that Fusco attributed 
primarily to the new firewall. 

San Mateo, Calif.-based Key- 
note said Jcrew.com was among 
the top four of the online 
retailers it checked for trans- 





action speed during the hol- 
iday season. The other sites 
were owned by Plano, Texas- 
based J.C. Penney Co., Seattle- 
based Nordstrom Inc. and 
eToys.com, which is owned 
by KB Holdings LLC in Pitts- 
field, Mass. 


Holiday Onslaught 

J. Crew had Digex install 
Nokia’s IP740 firewall appli- 
ance in September so it would 
be ready for the onslaught of 
online holiday shoppers, ac- 
cording to Fusco 

The IP740, which is made by 
the Nokia Internet Communi- 
cations unit in Mountain View, 
Calif., is a hardware device that 
integrates Check Point’s Fire- 
Wall-l software. 

Berk said special-purpose 
firewall appliances such as the 
IP740 can often increase per- 
formance compared with in- 
stallations in which firewall 
software is installed directly 
on servers also running order 
processing applications. 

But the kind of setup being 
used by J. Crew isn’t cheap. 
Digex said the high-speed 
firewall service costs $3,755 to 
$7,450 per month, as much as 
40% more than its standard 
firewall offering. D 
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U.K. Defense Agency 
Slows IT Project 


The U.K. Ministry of Defence has 
scaled back the rollout of a new 
spare-parts procurement system 
due to budget constraints in its fis- 
cal year ending in March. The sys- 
tem is based on software developed 
by Atlanta-based Indus Internation- 
al Inc., which said it will try to off- 
set any impact on its revenue by re- 
assigning workers and making un- 
specified cost reductions. 


Co-Founder Quits CEO 
dob at J.D. Edwards 


Denver-based J.D. Edwards & Co. 
said co-founder C. Edward McVaney 
has stepped down as CEO for the 
second time. McVaney, who had re- 
turned to the job two years ago af- 
ter initially giving it up in late 1998, 
will also stop serving as chairman 
of the software vendor’s board in 
March. He’s being replaced as 
chairman and CEO by Robert 
Dutkowsky, previously an executive | 
at Boston-based Teradyne Inc. 


IBM Releases New 
Xeon-Based Servers 


IBM late last month started shipping 
servers based on the new multipro- 
cessing version of Intel Corp.’s 





Pentium Ill Xeon chip. The eServer 
x360 machines support four to 16 
of the Xeon MP devices and are the 
first Intel-based systems built 
around a new architecture that, 
according to IBM, provides main- 
framelike management tools. 


Short Takes 


PEREGRINE SYSTEMS INC., a San 
Diego-based vendor of asset man- 
agement software and other appli- 
cations, warned that it expects to 
report a loss for its third quarter 
ended Dec. 31... . Horsham, Pa.- 
based VERTICALNET INC. said it’s 
buying Atlas Commerce Inc., a 
Malvern, Pa.-based vendor of soft- 
ware for private online exchanges. 


NEWS 


Caterpillar Digs Into 
Agile Development 


Modular programming approach used 
to deliver multimillion-dollar app suite 


BY LEE COPELAND 
O SPEED the devel- 
opment of a criti- 


cal Web-based fi- | 
nancial system for | 


its dealers all over 


the world, Caterpillar Finan- | 


cial Services Corp. made Agile 


programming methods part of | 


the project. 
Launched at year’s end, Cat- 


| erpillar Financial’s application 


suite, called ExpressTrack, 
took three years to build and 
cost several million dollars. 
But because the 


Inc. used Agile methods, it had 
small, usable parts of the Java- 
based application ready early 
in the development process, 


said Tom DePauw, manager of 


IT at Caterpillar Financial. 
Agile development tech- 


| niques call for keeping code | 
| simple, testing often and deliv- 
ering small, functional bits of 


the application as they are 


| ready. The idea is to build from 


those parts rather than deliver 
one large application at the 
end of the project. 


| First Things First 


“Far too much business val- 
ue is lost in software develop- 


| ment projects because every- 
one wants to get to the final so- | 
lution before deployment,” De- 


Pauw said. 
He credits ThoughtWorks 


| Inc., the Chicago systems inte- 
grator that developed the ap- | 
plication, for infusing the proj- | 
| ect with Agile methods. 


“We agreed on the big vi- 


sion,” said Roy Singham, CEO | 
| of ThoughtWorks. “The reality | 
| is that you can’t deliver every | 


business requirement in the 


| first release.” 
ThoughtWorks started the | 


project in March 1999 and de- 
livered a vital credit rating 


Nashville- | 
based subsidiary of Caterpillar | 





analysis application six months 


later. By taking a modular ap- | 
proach, only 5% of code was | 


discarded as requirements 
changed, DePauw said. 

Analyst John Dalton at For- 
rester Research Inc. in Cam- 


bridge, Mass., said more com- 


panies are experimenting with 


Agile methods because tradi- | 


tional waterfall techniques, in 
which each step is completed 
before moving to the next 
stage, require lots of upfront 
planning, are time-consuming 
and often miss the mark as 





business requirements evolve. 
To avoid these pitfalls, 
ThoughtWorks delivered func- 
tional parts of the application, 
such as credit approval, pricing 
and document preparation, 
every three to four months. 
When Peoria, Ill.-based Cat- 
erpillar began expanding its 
core business three years ago 
to include less-expensive com- 
pact equipment, Caterpillar Fi- 
nancial needed to transform its 
systems to support Web-based 
transactions with its dealers as 
opposed to the lengthier mort- 
gage-type financing process 
used for machines with sticker 
prices up to $2 million. Previ- 
ously, it took as many as 10 
days to process financing; the 


Chicago Seeks Proposals for 
Building Public/Private MAN 


City wants vendors 
to develop, manage 
broadband setup 


| BY JAMES COPE 
| The city of Chicago has issued 
| a formal request for proposals | 


(RFP) on a groundbreaking 
metropolitan-area 


22 vendors and 
providers. It expects to get re- 


| sponses by late March. 


The project, called CivicNet, 


expected to land on the Windy 
City’s shoulders. City officials 
are looking for private-sector 


companies to build and man- | 
age the network. The city gov- | 
| ernment, which has an annual 

telecommunications budget of | 


network | 
| (MAN) project to a shortlist of | 
service | 


| Daley 
| CivicNet early last year. The 
is aimed at bringing a broad- | 
band network with integrated | 
data, voice and video capabili- 
| ties to every nook and cranny | 
of Chicago over the next 10 | 
years. But most of the cost isn’t | 


more than $30 million, would 
be the anchor tenant 

The RFP was issued late last 
month, and vendors have until 
March 29 to respond, CivicNet 
project manager Doug Power 


said last week. The request 


was issued to a set of prequali- | 


fied vendors, most of which 
have shown an interest in the 
project from its inception. But 
Power said newcomers can 
also respond to the RFP. 
Chicago Mayor Richard M. 
announced plans for 


project has already moved 
through the design feedback 
and vendor qualification 
stages. Power said the RFP was 
sent to networking equipment 
makers, telecommunications 


service providers and systems 


integrators, including Cisco 
Systems Inc., Electronic Data 
Systems Corp. and SBC Com- 
munications Inc.’s Ameritech 
division. 

The plan to have vendors 
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Agile Advantages 
Agile programming methods 
yielded the following benefits 
for Caterpillar Financial in 
the development of its finan- 


cial services system: 

> Less upfront planning time 

> Functional parts of the appli- 
cation delivered quickly 

» Process was more responsive 
to changes in project require- 


ments, resulting in less dis- 
carded code 


new system reduces the trans- 
action to approximately 30 
minutes. 

About 60 U.S. dealers access 
the browser-based system, 
which connects to a back-end 
document management, trans- 
action processing and third- 
party financial services sys- 
tems. Caterpillar plans to roll 
out the application to dealers 
in Australia, Canada and 
France this year. 


create the framework for de- 
signing, building and ultimate- 
ly managing the MAN is a key 
idea behind CivicNet, accord- 
ing to Joe Mambretti, a profes- 
sor at Northwestern Universi- 
ty, who has been consulting on 
the project. 

John Mazur, an analyst at 
Gartner Inc. in Stamford, 
Conn., said he wouldn’t be sur- 
prised to see multiple consor- 
tia of vendors evolve from the 
RFP responses. That would be 
one way for vendors to get 
their arms around the CivicNet 
project, Mazur said. 

For example, he said, two or 
three large technology ven- 
dors, a communications ser- 
vice provider and a systems in- 
tegrator could team up and 
pull in other companies as the 
project proceeds. 

Power said he expects to re- 
ceive 10 to 15 RFP submissions, 
which he characterized as “de- 
sign-and-build conceptual re- 
sponses.” After that, he added, 
city officials “will be asking for 
specifics on how [vendors] 
plan to do it and how much it 
will cost” before awarding any 
contracts for the project. Con- 
tracts are to be issued late this 
year or early next, he said. D 
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Continued from page 1 


Windows XP 


agency stated that it is 
fied” that a patch corrects a 
vulnerability that could lead to 
system compromise and “af- 
fords substantial and adequate 
protection” against the critical 
vulnerability that could lead to 
denial-of-service attacks. 

But some security experts 


continue to recommend that, | 


in addition to installing the 
patch, users disable the UPnP 
service, which lets PCs discov- 
er and use newly added net- 
work-based devices, such as 
printers, that advertise them- 
selves as being available. 


Marc Maiffret, chief hacking | 


officer at Aliso Viejo, Calif.- 
based eEye Digital Security, 


the security firm that notified | 


about the UPnP 


shortly 


Microsoft 
vulnerabilities 
Windows XP 


be scrutinized more closely 
with security in mind. “Until 
they actually redo it, it’s not 
something people should be 
using,” Maiffret said. 

“It just allows for a lot of 


ways that you can manipulate 


systems or services to basically 


use UPnP to either hide attacks | 


or use UPnP as a jump point 


for other attacks,” Maiffret 


said. Microsoft’s patch fixes 


the problem “as far as what we 
know now,” but since people 
aren’t using UPnP, the service 
should be disabled, he said. 
Russ Cooper, an analyst at 
TruSecure Corp. in Herndon, 
Va., and moderator of the Win- 
dows NTBugTraq mailing list, 


satis- | 





after | 
was launched, | 
charged that the UPnP proto- | 
col is “half-assed” and needs to | 





said UPnP “offers many more | 
opportunities for problems,” | 
; Sept. ll presents a particularly 


and Microsoft shouldn’t have 
released the UPnP capability 
until the protocol was well 
thought out. 

“Microsoft had to modify 
the UPnP protocol as defined 


| Stamford, 


by the UPnP Forum in order to | 


patch against vulnerabilities 
demonstrated by eEye,” Coop- 


The first version of the 
UPnP architecture was ratified 
in June 2000 by the UPnP Fo- 
rum, a nonprofit group of more 
than 400 vendors from the 
consumer electronics, com- 
puting, home security, home 
appliance, computer network- 


| ing and related industries. The 


forum defined and published 
UPnP device and service de- 
scriptions to help devices con- 
nect to each other and simplify 
home networking. 

Mark Lee, chairman of the 
UPnP Forum and a lead Win- 
dows product manager at Mi- 
crosoft, said the forum has a se- 


| curity working committee that 


proactively looks to make sure 
that UPnP is a secure technolo- 
gy and checks out various sce- 


narios in which UPnP technol- 


ogy is going to be used. He said 
the UPnP Forum is open to in- 
put from industry participants. 
“If there are ways to make the 
technology better, we’re ready 
and able to listen,” Lee said. 

A Microsoft spokesman said 


Continued from page 1 


‘Security Threat 


software programs should be | 


able to handle most malicious 
software relatively easily. 


“The bottom line of malware | 
opening new ports on their 


prevention remains the same: 
Filter, patch strategically and 
update your antivirus soft- 
ware. 
protect your network’s vulner- 


| abilities,” said Roger Thomp- 
| son, an analyst at Herndon, 
Va.-based security firm TruSe- 


cure Corp. 


The rush by corporations to | 


set up videoconferencing and 
Web seminar capabilities after 


serious security risk for com- | 
panies that aren’t careful, said 


John Pescatore, an analyst at 


ner Inc. 


Users this year can expect to | 
see at least one widespread at- 


| tack that tries to exploit open- 


er said. “If the only way to pro- | 
| ated during the frantic push to 


tect against the vulnerabilities 
is to modify the protocol, the 
protocol is flawed.” 


ings in enterprise firewalls cre- 


set up these capabilities, Pes- 
catore said. Corporations’ ac- 





Use common sense to | 


Conn.-based Gart- | 


NEWS 


OU sl 


| The Problem 


VULNERABILITY: Affects the uUniversal 
Plug and Play service in Windows XP, ME, 
98 and 98SE. 


RECOMMENDATION: Microsoft urges 
Windows XP users to apply the patch im- 
mediately. Users of Windows ME, 98 
and 98SE should apply the patch if UPnP 
is installed and running. 


the company remains commit- 
ted to UPnP technology and 
doesn’t believe that “enabling 
UPnP in and of itself poses a 
security risk.” 

“There is great customer in- 
terest in UPnP, especially as 
more UPnP-capable devices 
are becoming available,” said 


Scott Culp, manager of Micro- | 
| soft’s Security Response Cen- 


ter. “Folks who don’t want 
UPnP can certainly turn off the 


| service, but just applying the | 


celerating efforts to link their 
internal applications with 
those belonging to external 


| partners and suppliers using 
| technologies such as XML and 


Simple Object Access Protocol 
are another source of concern, 
Pescatore said. 

Increasingly, companies are 


firewalls to let outside applica- 
tions talk with inside applica- 
tions, “even though the securi- 


ty aspects of doing so are total- | 


ly unproven,” Pescatore said. 
“The rush toward Web ser- 


vices will result in glaring | 


holes,” he cautioned. “2002 is 
not the year to jump on Web 
services.” 

Malicious code that blends 
virus and wormlike 
and is designed to take advan- 
tage of multiple software vul- 
nerabilities also poses a major 
threat, said Thompson. 

One example of this emerg- 
ing class of threat was last 
year’s Nimda worm, which 


| wreaked havoc on enterprise 


networks around the world. 
Unlike previous malware, Nim- 


| da spread both via the Internet 
| and e-mail, taking advantage 





features | 





patch is sufficient to return it 
to safe operation.” 


: . ae | 
Roger Gariepy, chief infor- 


mation technologist at Air 
Products and Chemicals Inc. in 
Allentown, Pa., said he’s not 
sure he would “turn on a sys- 
tem that allows non-directly- 
attached devices to automati- 
cally plug into the PC.” He 
added, “I don’t think we’re go- 
ing to have a lot of UPnP-capa- 
ble devices in the corporation.” 

The UPnP service is enabled 
by default in Microsoft’s Win- 
dows XP operating system, 
which was launched Oct. 25. It 
can be activated in Windows 
ME and installed in Windows 
98 and 98SE via the Internet 
Connection Sharing client that 
ships with XP. 

Maiffret said eEye Digital 
Security notified Microsoft 
about the denial-of-service 
vulnerability in the UPnP ser- 
vice on Oct. 26. He said the 
firm told Microsoft about two 
more vulnerabilities, distrib- 
uted denial of service and 


of multiple vulnerabilities. 
Expect to see more sophisti- 
cated variants of Nimda this 
year, Thompson warned. Deal- 
ing with them will require con- 
stant attention to patching, in- 
trusion monitoring and updat- 
ing antivirus suites, he added. 


Common Viruses 


The 10 viruses most frequent- 
ly reported to Sophos Anti- 
Virus in December: 


PERCENTAGE OF ALL 
VIRUS REPORTS 
TO SOPHOS 


92.4%* 
1.0% 


VIRUS 
W32/Badtrans-B 
W32/Goner-A 
W32/Magistr-B 0.9% | 
W32/Sircam-A 0.7% | 
W32/Magistr-A 
W32/Hybris-B 
W32/Nimda 
W32/Sheer-A 
W32/Nimda-D 
W32/Apology-B 


*Figures in right column indicate the percentage of aii 
calls Sophos received in December that mentioned 
each virus. 


os 
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buffer overflow, in November. 

Microsoft announced the 
vulnerabilities on Dec. 20, 
upon releasing its patches. A 
company spokesman defended 
the time lag, noting that the 
company had to develop 
patches for four operating sys- 
tems with more than 20 lan- 
guage versions for each. 

“All told, we developed well 
over 100 different versions of 
the patch,” the spokesman said. 
He also noted that the testing 
requirements were significant. 
“Our testers worked around 
the clock to complete the test- 
ing in time to release the patch 
prior to Christmas week.” 

Gariepy noted that security 
vulnerabilities aren’t unique to 
Microsoft. “All operating sys- 
tem vendors need to address 
this far more seriously than 
they have in the past,” he said. D 


IC 


Security concerns have 
made Gartner wary of 
other new features in 
Windows XP. 


www.computerworld.com/q?26214 


The wireless security indus- 
try will also receive significant 
attention in 2002, said David 
Lelievre, a project manager at 
Clinton Township, Mich.- 
based application service 
provider Tweddle Information 
Services Inc. “The wireless In- 
ternet will emerge as the lead- 
ing trend for the next three to 
five years. Security will have to 
be defined and established be- 
fore the market hits full force,” 
Lelievre said. 

Also expect to see a lot of 
vendor consolidation this year, 
especially in the managed se- 
curity services arena, said Eric 
Hemmendinger, an analyst at 
Boston-based Aberdeen Group 
Inc. Corporations entering 
first-time relationships with 
security vendors need to pay 
special attention to the finan- 
cial stability of the companies 
and their customer 
Hemmendinger warned. “We 
are going to see some very 
public debacles in the security 
space this year,” he predicted. 

“The caution here for users 
is you can’t afford not to do 
due diligence” before choosing 
a security vendor, he said. D 


bases, 
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Boeing Gets FCC License for 
Internet Service on Planes 


BY LUCAS MEARIAN 

The Boeing Co. has been 
granted a license by the Fed- 
eral Communications Com- 
mission to launch its new air- 
borne Internet service. How- 
ever, the project still faces 
delays because of recent deci- 
sions to pull out by the three 
U.S. airlines that were helping 


| to fund the effort. 

| The FCC last month gave 
Boeing the green light to oper- 
ate up to 800 two-way broad- 
band connectivity stations on 
its aircraft, provided the 
Chicago-based company can 
do so “without causing harm- 
ful interference to other allo- 
cated services” on the frequen- 


NEWS 


cy bands that it plans to use. 
Airplane passengers using 

| the Connexion by Boeing ser- 

vice will be able to access the 


| nets as well as e-mail while fly- 
| ing above US. territory and 
waters. Airlines will have to 
retrofit their planes with Eth- 
ernet-type wiring and phased- 
array antennas to offer the 
service, according to Boeing. 
The FCC license “is a big 
momentum-builder for us in 
our effort to gain international 
regulatory approval” for the 





Internet and corporate intra- | 





| service, a Boeing spokesman 


said. As part of the licensing 


1 


wake of the Sept. ll terrorist 


| attacks on the U.S. 


process, the company tested a | 
| Lufthansa AG is the only one 


Boeing 737 to show that the 
technology won't interfere with 
other spectrum uses. 


German airline Deutsche 


teaming with Boeing on the 


| project. The Boeing spokes- 


But Boeing still faces chal- | 
lenges in getting Connexion | 


off the ground. 
In late November, American 


man said Lufthansa plans to 
launch the Internet service on 
some of its planes late this year 


| or in early 2003. 


Airlines Inc., Delta Air Lines | 
Inc. and United Air Lines Inc. | 


pulled out of the joint venture 
that was developing the ser- 
vice because they had all suf- 
fered financial blows in the 


He added that American, 
Delta and United are still inter- 


| ested in the service and will 


participate in a series of meet- 


ings beginning this month to 
define how it should work. D 


HI-TECH BUSINESS PARTNERS 


is a new Internet exchange helping professionals in telecommunications, information technology, 
e-business, media, and the Internet find business partners — — around the world or next door. 


www.partnerpoint.org 


Quality information about 
companies and executives 
looking for partnerships now 


Partnerships include: 
* Co-marketing 

¢ Distribution 

* Sales/Supplier 


* R&D 


¢« Joint Venture 
* Financing 


Tools to identify and targ 
kinds of companies you 


Connections to a network’ Olay 
quality business organizations 
supporting your industry 


~~ 


partnerpoint. org 


Your networking resource from the U.S. Chamber of Commerce 


ANNUAL MEMBERSHIPS FREE FOR A LIMITED TIME ONLY 


Group, ServerVault, Siemens, Sun Microsystems, and Tisani. 


is backed by the U.S. Chamber of Commerce and leading high-tech companies: 
CommWorks, Equinix, Genuity, International Data Group, Keymind, Lucent Technologies, META 








Use of some features may require Internet or network access and purchase of additional hardware 


; 
| 








Yes you can. Introducing Microsoft” Windows® XP 
Professional, the OS that takes mobility tea much 
higher place. For starters; users don’t even need 
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Lucent Seils Control 
Of Venture Group 


Lucent Technologies Inc. said it has 
sold off majority ownership of its 
new-technology venture develop- 
ment unit to Coller Capital Ltd., a | 
London-based firm that buys invest- | 
ment portfolios from companies 
that need cash. Coller now owns 
80% of the networking vendor's 
venture group. Murray Hill, N.J.- 
based Lucent said it will retain a 
20% limited partner’s interest. 


Symantec Names New 
President and COO 


Security software vendor Symantec 
Corp. named former IBM executive 
John Schwarz as its president and 
chief operating officer (COO), with 
responsibility for product develop- 
ment, sales and technical support. 
Schwarz most recently was CEO of 
Reciprocal Inc., a defunct security 
start-up. At Cupertino, Calif.-based 
Symantec, he reports to Chairman 
and CEO John W. Thompson. 


Be Weighs Lawsuit 
Against Microsoft 


Menlo Park, Calif.-based Be Inc., 
which sold its multimedia operating 
system assets to Palm Inc. in Santa 
Clara, Calif., two months ago, said 
it’s mulling the idea of filing an an- 
titrust suit against Microsoft Corp. 
Be also announced the resignation 
of CEO Jean-Louis Gassee and said 
Dan Johnston, its general counsel, 
will act as president while the com- 
pany winds down its operations. 





NEWS! 
Oracle Moves to Lay Off 
Staff After Tough Quarter 


its workforce as divisions get combined 


BY MARC L. SONGINI 
UST THREE WEEKS after 
reporting the financial 
results for what CEO 
Larry Ellison called “our 
toughest quarter in a 


decade,” Oracle Corp. dis- 


closed plans to trim as many as 
850 employees from its 42,000- 
person workforce. 

Without releasing many 
specifics about the planned 
cutbacks, the software vendor 


| last week issued a brief state- 


Hewlett son seeks 
votes against plan 


| BY MATT BERGER AND 
| STEPHEN LAWSON 


Hewlett-Packard Co. again was 


| forced to defend its plan to ac- 
| quire Compaq Computer Corp. | 
| after dissident HP board mem- | 


ber Walter Hewlett filed a 


| proxy statement asking the 
| company’s 


shareholders to 
vote against the proposed deal. 

In a response submitted to 
the U.S. Securities and Ex- 


change Commission (SEC) late 


Epicor Cuts Jobs 
Despite Better Sales 


Epicor Software Corp., an Irvine, 
Calif.-based maker of business ap- 
plications, said its software license 
revenue for the fourth quarter of 
last year should be higher than ex- 
pected. But Epicor added that it cut 
its workforce by 15% in an effort to 
help stem losses. 


last month, HP reiterated its 


contention that acquiring Com- | 
| paq “will accelerate our strate- | 


gic transformation by years by 


puting, PCs, IT services and 
printing and imaging.” 

The company’s latest salvo 
came just a day after Walter 
Hewlett and a trust that bears 
the name of his father, HP co- 
founder William R. Hewlett, 








| ment saying that its workforce 


will be reduced by 1% to 2% 
early this year. Oracle ex- 
plained the move by noting 
that it “is realigning certain ar- 
eas to be more efficient.” 

The groups to be affected in- 
clude the company’s consult- 
ing and sales units as well as its 
vertical industry divisions for 
the government, education and 
health care markets. 

As part of the restructuring, 
Oracle said, workers in those 


‘HP Defends Compag Deal 
As Proxy Fight Intensifies 


Status Report 


Details on where HP’s proposed 


| acquisition of Compag stands: 


w The two companies in September said 
that HP had agreed to buy Compag ina 
stock-swap deal that would create a com- 
bined company with annual revenue of 
about $87 billion. 


lion. A decline in the price of HP’s stock 
lowered that significantly, but as of Jan. 3 
the value was $24 billion 


| aspecial meeting of HP shareholders, with 


the heirs of the Hewlett and the Packard 
families leading efforts to block the merger 


painted the planned merger as | 
| arisky deal that would distract 
| bolstering all of our business- | 

es, including enterprise com- 


HP’s management. The proxy 
statement filed with the SEC 
by Hewlett and the trust also 
claimed that the acquisition 
wouldn't improve HP’s IT con- 
sulting capabilities or its com- 
petitive position in the mid- 
range and high-end server 
markets. 


proxy filing, Walter Hewlett 





Slippery Slope 
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Like other technology vendors, Oracle has been hit by a 


continuing drop-off in sales: 


= The company lowered its revenue and profit outlooks after the Sept. 11 
terrorist attacks and then reduced them again in November. 


= Revenue in Oracle's second quarter ended Nov. 30 was down 11% year to 
year, with new software license sales falling by 27%. 


= When the second-quarter numbers were released, Oracle forecast a small 
year-to-year revenue decline during its current quarter. 


vertical industry operations 
have been folded into its North 
American sales force and con- 
sulting group. That move fol- 
lowed the late November de- 


if the SEC approves the 


and other merger opponents 


| will be able to distribute the 


statement to HP shareholders 
along with a card that they can 
use to vote against the deal at a 
special meeting expected to 
take place next month. 


| AChange of Heart 


Walter Hewlett initially vot- 


| ed in favor of the acquisition 
| along with the rest of HP’s 
| board. But in November, he re- 


canted his vote and announced 


| that he would launch a proxy 
fight against the merger of the | 


two computing heavyweights. 
Together, the Hewlett and 


| Packard heirs control 18% of 


HP’s stock — enough, analysts 
have said, to put the comple- 
tion of the deal in jeopardy. 
Some HP and Compag users 
have said the uncertainty over 
the outcome of the merger is 
causing them to re-examine 
their relationships with the 


two vendors due to concerns 


about which products will be 
supported by the combined 
company, or by either HP or 
Compag if the deal collapses. D 


Berger and Lawson are corre- 
spondents for the IDG News 
Service. 





parture of the executive vice 
president who was running the 
vertical units and created re- 
dundant positions among em- 
ployees with similar jobs, an 
Oracle spokeswoman said. 

The exact number of layoffs 
that will take place remains un- 
clear, the spokeswoman said, 
adding that the company plans 
“to, wherever possible, try and 
give people the option to find 
something else in Oracle.” 

The cutback follows a de- 
cline in both revenue and prof- 
its during Oracle’s second 
quarter ended Nov. 30. The 
company in mid-December re- 
ported second-quarter rev- 
enue of $2.4 billion, down from 
the year-earlier total of $2.7 
billion. Net income in the 
quarter feli from $622.8 million 
to $549 million (see chart). 

The layoffs are the second 
round of job cuts made during 
the past 12 months by Oracle, 
which announced a similar 1% 
to 2% workforce reduction last 
March. Compared with the re- 
structuring moves at many 
other top technology vendors, 
though, Oracle’s cutbacks have 
been relatively small. 

The new layoffs by Oracle 
appear to be part of the general 
slowdown in the technology 
business, said Peter Urban, an 
analyst at AMR Research Inc. 
in Boston. “Oracle has not hid- 
den the fact that revenue 
growth has not been what it 
had planned,” Urban said. “But 
it’s not all Oracle’s fault. A lot 
of it is economic.” D 
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Computerworld’s Premier 100 IT Leaders are 
technologists who understand business needs, 
take calculated risks and lead through innova- 
tion. They are vice presidents of IT, Cis, IS 
directors and business managers honored as 
Computerworld’s Premier 100 from a wide swath 
of vertical industries. When you attend this 
unique conference, you'll hear proven examples 
of how these IT Leaders have advanced their 
organizations through innovative leadership. 


Crafted by Computerworid editors, this con- 
ference offers a radical departure from the 
standard IT event. With a focus on great 
ideas, best practices and real applications of 
IT strategy, you'll gain direct insight from 
leading user organizations. The major ses- 
sions at Computerworld’s Premier 100 IT 
Leaders Conference will provide highly inter- 
active, entertaining discussions with IT 
Leaders and industry experts - each moder- 
ated by Computerworld editors in a town-hall 
meeting format. Key topics will center on the 
intersection of technology and business in 
areas critically important to IT Leaders. 
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See how award-winning IT Leaders solve real-world issues with: 


CRM 


Connecting customer systems with the supply chain for business innovation 


ROI 


Best practices in measuring IT project results and aligning with senior management goals 


Supplier Management 


Mastering the art of negotiating and creating true partnerships with vendors, outsourcers, 
and service providers 


Infrastructure Strategies 
Maximizing data management, networks, storage and wireless technologies 


Enterprise Integration 
Creating value with existing IT architectures, Windows migration and Web-based technologies 


Security 
How much is really enough? Calibrating security needs against budget realities 


CONFERENCE AGENDA ___ | 


SUNDAY, MARCH 3 
12:00 pm - 5:00 pm 

GOLF OuTING 

7:00 pm - 9:00 pm 

PRE-CONFERENCE NETWORKING RECEPTION 


focused on new priorities without sacrificing quality in tough economic times? 
How do bia rennet their IT mission and abies ced staff forthe next 


aa This cand will examine the way various ieadorstio styles ~ fra 
| diplomat to innovator to strategist - have worked for some of the industries 
| most challenged by the economic dewntur. 


| Panelists: Roger Gray, Vice President and C10, Pacific Gas & Electric: 
| Deryck Jones, President, Sentech LLC; Milks Ragunas, CTO, Staples.com, 
| John Fiore, Vice President and C10, State Street Corporation 


10:15 am - 1:00 am 
| INTERACTIVE Q&A: NEW THINKING ON AN OLD PROBLEM: 
| MANAGING VENDORS AND SUPPLIERS TO MAXIMUM ADVANTAGE 
| Moderator: Maryfran Johnson, Editor in Chief, Computerworid 


| The relationship between corporate users and their key vendors is often a 

| strained affair, with distrust and disdain on both sides. Yet the need to 

| — deploy innovative, cost-effective technology solutions to specific business 

| problems has never been more acute. How do you save your company 

| money on an {T sourcing strategy that impresses the senior management 

| team while preserving a good working relationsiip wiih vendors? Where do 
| you find the levels of contract negotiating expertise your organization 

| needs? What are the most critical skills in managing ongoing supplier rela~ 
| _ tionships? This interactive Q&A will explore and deliver on the front-lines 
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8:15 am - 9:00 am 


KEYNOTE: CRAFTING IT STRATEGY IN CHAOTIC TIMES 


&) Eric Dean, C10, United Airlines 


9:00 am - 10:00 am 
PANEL DISCUSSION: LEARNING TO SUCCEED WITH PLAN B: 
TT LEADERSHIP IN CHALLENGING TIMES 


experience of a longtime senior executive consultant and a supplier man- 
agement expert whe comes from the CIO ranks. 


Panelists: Thornton May, Chie! Psychobrapher and Futurist, Toler Associates; 
Bart Perkins, Managing Partner, Leverage Partners, Inc. 
11:00 am - 12:30 pm 


| TT USER / IMPLEMENTER CASE STUDIES 


| INTERACTIVE LUNCHEON 


‘ Uncertainty may just be the major guiding principle in the New 
Millennium of the IT economy. Yet IT Leaders must be ready 
to respond swiftly and confidently to every crisis - despite dwindling 
Tesources and shifting business fortunes. How do senior IT executives stay 


| 
| 
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"F Moderator: Pimm Fox, West Coast Bureau Chief, | 12:30 pm - 1:30 pm 
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1:30 pm - 2:30 pm 
PANEL DISCUSSION: INFRASTRUCTURE: ALWAYS ON, 
ALWAYS UNDER FIRE 


Moderator: Mark Hall, Editor at Large, Computerworld 
Your infrastructure never sleeps, but it's keeping you up at night 
That's because the Web is always on, open to users, customers 
and hackers, too. Your global organization never stops working, 
either. Planned downtime luxury few can afford. Not long ago, 
a few minutes of downtime was 4 user inconvenience, But now, the CFO is 
breathing down your neck about lost revenue opportunities. And the scope of 
your infrastructure keeps expanding beyond just wires and network gear. foclay, i 
includes elaborate server and storage systems, armies of PCs, wireless gadgets, 
data management and business intelligence software, complex directory services, 
vital security systems and encroaching technologies like Web services, Our expert 
panel of {T | eaders will bring their hands-on experience to bear, suggesting 
Strategies and (dare we say it) solutions to the source of so many {T headaches. 
Panelists: Kiril Tatarinov, Senior Vice President and CTO, BMC Software; 
Bob Palmer, Assistant Vice President, Ecommerce Technology, Lenox 


2:30 pm - 3:00 pm 
THE BUSINESS STRATEGY BEHIND DELTA’S IT INFRASTRUCTURE 
t Curtis Robb, Chief Technology Officer, Delta Technology 


As the IT arm of $16 billion Delta Air Lines, Inc., Delta 

Technology views its critical infrastructure through the fens of 

business as well as technology. The company strives to achieve 

halance between three key attributes: tracking total cost of own- 
ership, finding a “sokition that fits the problem,” and accelerating time to market. 
In this talk, Delta's CTO will provide an in-depth look at how he stp Nort 
complex business driven by an infrast hat manages 240,000 d 
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BREAK 
3:15 pm - 4:15 pm 
PANEL EISCUSSION: THE HOLY GRAIL OF INTEGRATION: 
CRM MEETS THE SuPpLy CHAIN 
Moderator: Cathy Hotka, VP of IT, 
National Retail Federation 
Connecting your customerfacing syst with your back office is 
an ongoing goal for 
nection from CRM outward to your 2 supply chain may just be the Holy £ 
the coming decade, What can go Everything from language and protocol 
conflicts to security breaches, data cleanliness concems and the perennial lack of 
common standards across multiple platforms, Yet on the brighter side, there are 
increasinwy useful tools (including statistical analysis software that business peo- 


ple can actually use) emerging to help. This panel wil explore the practical realities 
of collaborative planning and supply chain integration with the customer in rnind, 


Panelists: Koger Gurnani, Vice President and C10, ¥erizonWireless: 
Jerry Hale, Director of Global Business, Eastman Chemical Co. 
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“BEST I CLASS” AWARDS CEREMONY IN THE EXPO 
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8:00 am - 8:15 am 

OPENING REMARKS 

8:15 amt - 9:00 am 

OPENING KEYNOTE PRESENTATION 

9:00 am - 10:00 am 

PANEL DISCUSSION: REAL-WORLD ROI 
Moderator: Julia King, National Correspondent, 
Computerworld 
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for better nomic times ahead. 


Panelists: Louis Gutierrez, CTO, Harvard Pilgrion Health 
Jean Holley, C10, USS; 
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12:00 pm - 1:30 pm 

EXPO OPEN, BUFFET LUNCHEON 


1:30 pm - 2:30 pm 
PANEL DISCUSSION: ENTERPRISE SECURITY - How MUCH IS 
REALLY ENOUGH? 
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nent or the public? Are the ex P 
enough to lead to improvements in our risk post 
se to bear on these questions, providing senior 
and useful ideas to take back to their own 


Panelists: Howard Schmidt, Chief Security Officer, Micresott Corp. 
Russ Lewis, Executive Vice President and C10, GFinet inc. 
David C. John, First Vice President C10, Bayerische Landesbank 
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4:30 pm - 5:15 pm 
CLOSING KEYNOTE PRESENTATION: FUELING THE ENGINE OF 
CREATION: IT AND BIOTECHNOLOGY 
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7 Guest Speaker: Thornton May, Chief Psychographer and 
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_ Honoree Registration 

If you are a Premier 100 Honoree, special 
arrangements are being made for your conference 
registration. To register, please call Kate Davis 
at 1-800-343-6474 ext. 8518. We ask that all 
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-Learn how Web services will affect your business today and tomorrow. 


InfoWorld is launching the first and only industry conference to tackle both the technology and business issues surrounding Web 


services. Join industry leaders, business executives, senior IT professionals, and InfoWorld's editors for a focused series of 


keynote addresses, panels, and interactive roundtable discussions to explore what Web services will mean for your company. 


Meet the experts and get access to the people 
defining next-generation Web services. 
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Jack Ozzie, Co-founder, Vice President of Development, 
Platform and Developer Services, Groove Networks 


Marvin Richardson, CTO, Lante 
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Anthony Scott, CTO, Genera! Motors 


For a full list, go to www.infoworld.com/nextgen. 
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Adapting Existing Applications to 
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How to Deploy Web Services 


Get a glimpse of the emerging 
companies, technology, and 
research driving Web services. 


Emerging Technology Pavilion - 
See hands-on demonstrations of 
emerging Web services products. 


InfoWorld Test Center - Meet the 
experts who analyze products and 
technology for InfoWorld. 


WebGain App Builder Challenge - 
Watch three teams build the best Web 
services application in 48 hours 


InfoWorld Research - Find out how 
Web services are already impacting 
businesses 
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NEWSOP! 


PATRICIA KEEFE 


anta’s Little Hinderers 


ELL, I TRIED. I REALLY DID. I was willing to invest 
the time, twiddle my thumbs while pages loaded, 
fill my cart and pony up the dough. Problem is, too 
many online retailers still aren’t willing to spend 
the time, and lack the common sense, necessary to 


get the customer experience right. 
This remains true despite the bar- 
rage of uplifting holiday online shop- 
ping postmortems. Yes, more people 
than ever holiday-shopped online — 
15% more than during last year’s 
fourth quarter, according to re- 
searchers such as comScore Net- 
works Inc. and Pew Internet & Amer- 
ican Life Project. But that’s only 1% to 
2% of overall retail sales. Most sales 
still take place in traditional stores, in 
part because it remains too hard in 
many cases to spend online, forcing 
would-be buyers to instead surf and then drive. 
Presumably, online merchants want customers 
to explore their sites — the more pages they click 
and the longer they stay, the more likely they are 
to fill up their shopping carts. This is a good 
thing. But not at sites like PotteryBarn.com, 
which proudly times out shopping carts “every 30 
minutes.” Or SmithandHawken.com, which takes 
great sport in sneaking up on unsuspecting shop- 


pers and wiping out all traces of their fully loaded | 


shopping carts. And StonewallKitchen.com won't 


Dimon 9ez- 

femove Your 
\att 
3% 


a 
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PATRICIA KEEFE is editorial 
director at Computer- 
world. You can contact 


her at patricia_keefe@ 
computerworld.com. 
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handle more than five different ad- 
dresses in a single order. Who needs 
positive cash flow and satisfied cus- 
tomers when you can ignite Web rage? 
It’s foolish to penalize anyone inter- 
ested enough to spend an hour or more 
actually clicking through several cate- 
gories of products. Treating shoppers 
like loiterers is a good way to guaran- 
tee short visits and canceled sales. 
The problem is compounded by use- 
less customer service. When shoppers 
run into problems online, they want 
answers — and soon. A Jupiter Media 
Metrix study released last week found that the 


| number of sites that respond within two days has 


actually fallen, and as many as one-third take 
longer than three days or don’t respond at all. 

Despite our growing patronage of online shop- 
ping, analysts say Web retailers still lack adequate 
staff and technology, such as software that can 
help automate routing and responding to e-mail. 
This is folly. To capitalize on this growing wave of 
interest, invest today in your online business to 
improve the customer experience. D 
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PIMM FOX 


War Games IT 
Vendors Play 


E ZNDORS OF solid-state flash 
memory tend to market it as be- 
ing so rugged that it’s used on bat- 

tlefields. But the reality is more prosaic 
and nicely illustrates how best-of-breed 
IT systems don’t automatically make sense, even 
when they can deliver impressive (and costly) 
performance gains. 

The substantial price 

differential between stor- 
ing data on a mechanical 
disk (cheap) and on silicon 
(expensive) is about 130 
times. But even this hefty 
premium for solid-state 


| . . 
memory is less than it was 


in the early 1990s. 
indeed, an abundance of 
solid-state flash memory 


PIMM FOX is 
Computerworld’s West 
Coast bureau chief. 
Contact him at pimm_fox@ 
computerworld.com. 


usher in new uses. Medical 


| applications now take advantage of flash memo- 
| ry’s enhanced access capabilities to quickly see 


rich graphical displays. Network equipment mak- 
ers also recognize the benefits of flash memory to 


| speed data delivery, thereby relieving bandwidth 
| constraints. But in both of these markets, the 
| higher price for flash memory is more than bal- 


anced by the increase in performance these users 
demand. 
Unfortunately, the same isn’t true throughout 


| the IT ecosystem. Vendors constantly tout new 
| technology — wrapping it in marketingspeak de- 


signed to make potential users think they are one 
step removed from a Special Forces operation. 
The very idea of “mission-critical” IT only 


| serves to make us feel better about the IT fictions 
| we tell ourselves. The serious intonations of IT 
| vendors stroke our egos, while punching a hole in 


our balance sheets. 
In the solid-state flash memory world, there are 


| mission-critical situations in which drives can’t 

| fail. A PC aboard an unmanned submarine map- 
| ping deep-ocean currents without a tested, 100% 
| reliable drive would be folly, just as using a gel- 

| coated mechanical drive in a missile guidance 

| system would likely not meet the rigorous re- 

| quirements of the military. 


Industries such as oil and gas, transportation, 


| and manufacturing, in which severe vibration, ex- 
| treme temperatures or physical abuse of equip- 


For more Computerworld columnists and links to 
archives of previous columns, head to 
www.computerworld.com/q?qI000 
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ment is routine, have logical and cost-conscious 
reasons for selecting disk drives from companies 
such as Livermore, Calif.-based Memtech SSD 
Corp. The U.S. Navy uses the company’s solid- 
state drives in its new Virginia class of nuclear at- 
tack submarines and in the catapult systems 
aboard aircraft carriers. 

IT vendors for too long have tried to tell users 
that their wares provide a cachet that’s akin to 
what automakers use to proffer 4-wheel-drive 
SUVs to soccer moms whose daily adventure is 
driving to the supermarket. To borrow from the 
military lexicon, it’s overkill and obscures real 
need and price assessments, projecting a false 
sense of who we are and what we do. D 


DAVID FOOTE 


As 2002 Dawns, 
Job Market Has 
Some Bright Signs 


O YOU THINK the most influential 

stories on the current IT employ- 

ment market are layoffs, spending 
cuts, hiring slowdowns, canceled proj- 
ects and anal-retentive CFOs? Don’t get 
me wrong — things are definitely tough. But it 
seems we’re being spoon-fed a little too much 
gloom and doom. 

There are plenty of other trends and new de- 
velopments that translate into bona fide opportu- 
nities for any IT worker mapping out a new near- 
term job strategy. Let’s start 2002 right by focus- 
ing on a few things that caught my attention in 
my company’s latest research survey, involving 
nearly 2,000 employers. 

@ Networking jobs are earning more respect. In spite 
of the recession, the e-business juggernaut con- 
tinues to gain momentum, 
and networking-related 
jobs have benefited signifi- 
cantly. In fact, base pay for 
network engineering and 
operations professionals 
grew nearly 12% in 2001, 
well above the 7.4% aver- 
age increase for IT. The 
following trend best un- 
derscores their elevated 
status: Not since Lotus 
Notes workers in the mid- 
90s have I seen employers 
methodically shifting dis- 
him at dfoote@ cretionary bonus pay into 
festapartners.com. base salary for a particular 
group of IT workers. It’s a rare and supreme vote 
of confidence — after all, unlike bonuses, base 
salaries are rarely reduced in a bad year — plus a 


DAVID FOOTE is president 
and chief research officer 
at Foote Partners LLC, a 
management consultancy 
and IT workforce 
research firm in New 
Canaan, Conn. Contact 
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bold statement that certain IT jobs are worthy of 
more serious investment. 

@ Security is on the rise. Many executives now right- 
ly believe that high-profile Web attacks, electronic 
fraud and privacy breaches can seriously damage 
their companies’ reputations and impact revenue 
generation. Our research indicates that only one 
in four companies has a dedicated security depart- 
ment, but this will soon change now that senior 
executives are playing more direct roles in setting 
policy and determining where and how to invest 
in protection. Technical skills in areas such as 
computer forensics, intrusion detection, firewalls, 
authentication/authorization and security audit- 
ing are in highest demand; our surveys indicate 
that premium bonus pay for security certifications 
has risen nearly 19% since the first quarter of 2001, 
while base pay for corporate security positions 
grew 10%. But many employers will covet the fol- 
lowing qualities even more: a broad view of secu- 
rity; being adept at corporate politics; business 
knowledge, aptitude and skills; good relationship 
management, team and project skills; and the abil- 
ity to market, sell and negotiate outcomes. 

@ Flexibility makes a difference. Tight job markets fa- 
vor those candidates with the fewest restrictions. 
Among industries, hiring in defense, pharmaceu- 
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ticals, hospitals and health care has been expand- 
ing. The latter two will spend billions to comply 
with new regulations for protecting the security 


and confidentiality of medical records, and that 


will require system upgrades to meet a 2003 
deadline. Furthermore, Lockheed Martin recently 
won a government contract worth as much as 
$200 billion to build warplanes, and recent terror- 
ist events will stimulate development of weapons 
systems. Geographically, demand for all IT jobs 
has recently been highest in the Midwest and 
South and lowest in the Northeast and the San 
Francisco Bay area. 

Finally, employers are eager to invest in improv- 
ing customer relationships, reducing costs quickly 
and getting more from existing operations (as op- 
posed to investments in innovative products, for 
example). Expect more probing about your expe- 
rience in several areas, but especially in risk man- 
agement, benchmarking/metrics, project manage- 
ment, return on investment, negotiation, out- 
sourcing and supply chain management. 

Actors are admonished not to read media cov- 
erage about themselves lest they begin believing 
it. This also applies to IT workers, who will find 
payoffs this year for astute analysis, flexibility and 
unwavering optimism about their job options. D 


| [News, Dec. 17] sounds 
| like another advertise- 
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I's a Love-Hate Thing 


HE ARTICLE “Mi- 

crosoft to Wind 

Down Support for 
Windows NT 4.0” 


ment for Microsoft or, at 
the very least, marketing 


| spin. Most of the net- 
| works I know about are 


still using NT 4. They 
have some Windows 
2000, and about 30% are 
moving toward Active 


| Directory. Most want to 


continue with what they 
have (a stable network 
that satisfies their 
needs). None plans to 
move to .Net. Microsoft 
is determining what’s 


good for us, and you're 


supporting that effort. 
Paul V. Akin 
CEO/general manager 
ANet Consulting 

Santa Rosa, Calif. 


S A REGULAR read- 
er, putup with | 
the anti-Microsoft | 


bias of your publication | 


because of your above- 
average, broad coverage 


| of the technology world. 
| Dan Gillmor’s “Has the 

| Door Widened for Lin- 

| ux?” piece in the Dec. 17 
| issue, however, is offen- 


sive to me and demands 
a reasoned response 


| [News Opinion]. Phrases 


such as “Microsoft’s insa- 


| tiable appetite for domi- 


nation,” “paying tribute,” 


| “squash would-be com- 
| petitors” and “Micro- 
soft’s desire to squeeze 


money out of its cus- 
tomers” are blatant hy- 


| perbole that seeks to 


arouse, not inform. What 


| does Gillmor believe 

| Sun’s or Oracle’s or Red 

| Hat's business objectives 
| to be? Give money away? 
| Work toward strengthen- 
| ing competitors’ finan- 


cial positions? I’m not 
sure if your publication 
is intended to be essen- 
tially nonpartisan, but if 
so, you do a terrible job 
of offering any viewpoint 
other than the typical 
“evil empire” portrayal of 





Microsoft, ignoring the 
often similar or more 
egregious behavior of 
competitors and the fact 
that the profit motive is 


| king on the campuses of 


Sun, IBM, Oracle, Red 
Hat, etc., just as it is at 
Microsoft. I would great- 
ly appreciate a more bal- 
anced presentation of 
Microsoft and the indus- 
try as a whole. Please 
note that the above com- 
ments are solely my own 
and that I in no way rep- 
resent Microsoft. 

Paul Rich 

Senior technologist 

Microsoft Corp 

Seattle 


Be More Positive 


budgets at 68% of compa- 
nies you surveyed are ex- 
pected to shrink or stay 
flat. But in the accompa- 
nying chart, the percent- 
age of those that plan to 


| increase spending is actu- 
| ally 29% vs. 25% for 
| shrinking. One could ar- 


gue that it would be a bit 


| more accurate if you stat- 


ed that technology bud- 


| gets at 72% of the compa- 


nies are expected to stay 


| the same or increase for 
| 2002. Not only is this a bit 


more accurate, it’s a 


| whole lot more positive. 


Ron Gilbert 
President 
RPR Wyatt inc 


|; Phoenix 


COMPUTERWORLD welcomes 
comments from its readers 
Letters will be edited for brevity 
and clarity. They should be ad- 


| dressed to Jamie Eckle, letters 


editor, Computerworld, PO Box 


| 9171, 500 Old Connecticut Path, 


«<< HEIT BUDGET | 
Squeeze” [Bus- | 
iness ROI, Dec. | 


| 10] states that technology 


Framingham, Mass. 01701 

Fax: (508) 879-4843. Internet 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification. 


sc~L> For more letters 
| Cc on these and 
| © other topics, visit 
our Web site: 


www.computerworld.com/q?q5000 
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Dell | Small Business 


= ‘ i a Oh, did we mention that you can save 50% or more on our 
PowerConnect™ 2016/2024 Switch PowerEdge™ 500SC Server v F 
Cost-Efficient and Easy-to-use Unmanaged Switches NEW Basic Server at Our Lowest Price switches versus those other switches? When you combine reliable 


° Dell PowerEdge” servers — powered by Intel® Pentium? Ill processors — with 
5 Dell PowerConnect™ Network Switches, you can expand your network 
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REAL OPTIONS 


Real options reasoning, a method- 
ology popularized by the oil and 
gas industry to determine how 
much capital to commit to emerg- 
ing energy fields, could be used to 
evaluate IT investments, experts 
say. PAGE 28 


Some say the IT job market is the 
worst they’ve seen in a decade. 
Others say it’s the worst ever. 
Either way, IT leaders need to 
rethink their hiring practices to 
reflect a dramatically changed la- 


bor market and economy. PAGE 32 


SPINNING THE 
CUSTOMER'S INPUT 


Many companies that claim to be 
customer-centric make the mistake 
of doing what their customers ask 
for, not what they really need, 
contends Anthony Ulwick in this 
month’s Harvard Business Review. 
PAGE 34 


CAREER ADVISER 


Fran Quittel offers advice to a laid- 
off business analyst who is consid- 
ering returning to college. PAGE 38 
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PAUL A. STRASSMANN 
‘The ‘Right Spendin 
N 1986, GENERAL MOTORS’ top management became alarmed about 
escalating IT costs. To benchmark IT spending against Ford, GM 
hired me as a consultant to deliver an IT-to-revenue ratio compara- 


ble to Ford’s, whose IT budget was reportedly smaller than GM’s. 
It took me a while to convince GM that overall revenue wasn’t a 


reliable basis for reaching valid conclusions as to 
whether GM was overspending or underspending on 
IT compared with Ford. In those days, Ford, with 
less revenue, was outsourcing more of its production 
costs than GM was. Therefore, Ford would theoreti- 
cally require fewer employees to make a car and 
consume fewer IT resources to support its work- 
force. After adjusting for each company’s employ- 
ment, salaries, the amount of outsourcing and total 
assets under management, I delivered a report that 
was used to realign some of GM's IT spending. 

During the current economic downturn and IT 
budget crunch, some executive will likely come up 
with a consultant’s average IT-to-revenue ratio for 
your industry, then ask you to match it. In the chart 
below, I have included numbers from the year 2000 
for Ford and GM to illustrate how you might want to 
deal with such a simplistic challenge. 

As the chart shows, Ford’s and GM’s revenues and 
employment are alike, and therefore, their IT spend- 
ing should be close if you apply either a revenue- or 
spending-per-employee ratio. But their IT budgets 
are different because their financial and employment 
structures are different. GM’s estimated IT expendi- 
tures are approximately twice those of Ford’s! 

In 2000, GM purchased a larger share of its sub- 
assemblies, parts, components and IT than Ford did. 
Therefore, GM ought to employ fewer IT resources 
to manage operations. But that didn’t happen be- 
cause GM’s estimated information costs — such as 
sales, general and administrative expenses — rela- 
tive to its costs of goods sold are much larger than 
Ford’s. This difference is important because IT bud- 
gets can be best explained not by corporate revenues 
but by other factors, such as total information costs 
(which include IT 
spending), plus the 
salaries of all IT users. 
Information costs in- 
clude the purchase of es 
services from consul- adhe 
tants, outsourcing con- 
tractors, advertising 
agencies, law firms and 
accountants to support 


$170,064 
$178,763 





357 73.7% 


the internal information workforce. GM’s presumed 
advantage from its greater reliance on outsourcing is 
overwhelmed by a larger information workforce that 
almost certainly will generate more demand for IT. 

There are other indicators to consider. For in- 
stance, what are the differences in growth rates? 
Here, GM is at a disadvantage. Ford’s 1991-2000 rev- 
enue growth was twice that of GM’s, but Ford’s in- 
formation cost to value-added ratio remained level, 
while GM’s grew 34%. What matters is the difference 
in profits. As the chart shows, the automakers re- 
ported starkly different profits over a decade. 

Taking into account all the relevant financial indi- 
cators, GM’s much higher IT spending is about what 
I would expect. What is, then, the “right” IT budget 
for GM, or any corporation? That can’t be answered 
by having GM match Ford’s spending. The answer is 
to define a corporate structure that delivers superior 
profits, then realigning [T spending to support that. 
Implications: CIOs will be pressed to produce credible 
benchmarks to prove that IT costs are either in line 
with or lower than those of competitors. The “ex- 
pected” level of IT expenditures is determined by 
factors such as the ratio of information workers to 
the total workforce; the composition of the informa- 
tion workforce (such as clerical vs. professional 
workers); growth in corporate profits; dependency 
on purchases from suppliers; the value of assets 
under management; and the number of PC users 
supported. The “right” IT budget, then, is one that’s 
less than those of your chief competitors, while your 
firm delivers superior shareholder returns. D 
Strassmann has had to defend IT budgets many times in 
his career. Contact him at paul@strassmann.com. 


Ford VS. GM: In 2000, here’s how much Ford and GM spent on IT relative to revenue. 
Also shown are profits the automakers reaped from 1991 through 2000. 
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12.5% = $11,367 





WARNING 


THIS FACILITY IS 
SUBJECT TO 
SUDDEN SHIFTS 


IN SCALE. 
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When you think scalability, it’s time to think software. 


Today’s Web-driven world demands a faster way to scale up 
and out. But instead of thinking hardware, it’s time to think smarter 


software, as in the modular and scalable Microsoft” server platform. 


THINK UPTIME “Microsoft provides scalable and reliable 
products at an unbeatable price with the ability to scale out 
not just up. As a result we are able to add new servers without 
costly downtime Don Heckman, VP, Engineering Program 


Management, Qwest . 


The Microsoft server platform gives you the choice of thinking 
bigger, smaller, up, or out. That way you can deploy Microsoft SQL 
Server™ 2000 on Windows” 2000 Datacenter Server for heavy- 
duty ERP and transaction processing, and scale up to support 
terabytes of data and millions of transactions. Or scale out with 


Microsoft Application Center 2000 by adding clusters of Windows 





2000-based servers running distributed applications. And it has 
the lowest price-to-performance ratio of any competitive platform.” 
So no matter how quickly things change, your business is 


always perfectly scaled to handle it. For more ways to scale 


up—and out—with software, visit us at microsoft.com/servers 


/scalability Software for the Agile Business. 
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amethodology used bythe 


Realoptions reasoning, me 

oiland gas industry to predict 

investments in capital equip- 

ment, can identify unseen 

returns on IT investments, 

experts contend. 

By Peter Buxbaum ?e : t 


VEN BEFORE THE JOLT of the Sept. ll terror- 
ist attacks, the U.S. economy was on shaky 
ground. An impending recession and rig- DEFINITION 
orous budgeting led many IT managers to 
seek focused IT projects offering quick re- REAL OPTIONS is a systematic and integrated 
turns on investment. Was that a reasonable strategy? decision analysis process that centers on real 
Not necessarily. (nonfinancial) assets: Make a capital investment 
We live in a world of uncertainty. IT professionals today to create an opportunity in the future. Real 
have been living facing quandaries for some time. | options enable the owner to benefit from the up- 
What e-business initiatives should be pursued? side potential of an opportunity while controlling 
What’s the next killer app? The answers to such the downside risk. It's “real” because vou re in- 
questions are anything but sure bets. vesting in operating capital instead of financial 
Oil and gas developers also routinely make multi- capital. It's an option” because you're investing 
million-dollar decisions in a fog of ambiguity. In an in the right, but not the obligation, to invest. 
effort to make the best choices possible under the Much like IT infrastructure investments, a real 
circumstances, energy analysts often use a meth- options opportunity will pay off if market condi- 
odology called real options reasoning. They ad- tions are favorable. If the investment results in a 
vise, for example, on the value of alternatives loss, the loss is limited to the initial investment. 
to drilling whole hog into an oil reservoir 
of unknown capacity by evaluating op- 
tions such as spending more on prelimi- ed benefits were far off. The client used real options 
nary seismic studies. to break the project down into three phases. 
Some experts say the same approach “That way, they were able to learn about the appli- 
should be applied to IT investments. cation and give some thought about how to use it 
“In the old world, IT invest- more effectively,” he says. “This approach brought 
ments improved existing opera- about benefits early on in the project.” 
tions, and its success was tied to For instance, end users at the energy firm had to 
achieving a particular business out- | determine the likelihood of achieving the benefits 
come,” says Martha Amram, interim | they expected from the application. “Going through 
CEO of Vocomo Software Corp. in this process forced them to think specifically about 
Cupertino, Calif., and a writer on what they have to do to reach those benefits,” says Is- 
the subject of real options. “ROI raelit. “The net result was that they were better pre- 
and other traditional valuation pared to implement the change management needed 
approaches did just fine back for a successful implementation.” 
then.” Through real options, Israelit’s client was also able 
But ROI can be misleading to identify the riskiest aspects of the project. “They 
when IT is being implement- | put additional emphasis on mitigating the risks in 
ed strategically, rather than those areas,” he explains. “They also thought through 
for incremental improve- the phasing of different project components so that 
ment. Sam Israelit, manag- they could start to achieve the lower-risk returns 
er at consultancy Bain & earlier in the project and smooth the overall risk over 
Co.’s Boston office, tells of | the life of the project.” 
a client in the energy sec- The real options response to uncertainty, then, is 
tor that balked ata major | flexibility. Just as financial options seek to hedge the 
enterprise software in- risk associated with trading securities, real options 
vestment when it ap- attempt to mitigate the risk associated with deploy- 
peared that the anticipat- | ing business assets. 
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The trick is not to bet the company on a risky 
strategy nor to walk away from uncertain opportuni- 
ties that could pay big dividends. “The first principle 
is to postpone any investment that would expose the 
company to an irreversible downside,” says Rita Mc- 
Grath, an associate professor at Columbia Business 
School in New York. “Break the project up into mile- 
stones and commit resources sequentially.” 


Step by Step 


Characteristic of real options strategies is a step- 
by-step approach, in which small investments are 
made for specific purposes. If the desired outcome is 
achieved, the project manager has the option of go- 
ing forward. If the results are disappointing, the man- 
ager walks away, having lost only the initial invest- 
ment. Either way, the lessons drawn from the project 
are a win for the company. 

Take, for example, an investment in a new IT ar- 


The Accidental 


One of industry’s leading real options practitioners came 
upon the methodology accidentally. 

“We thought we were practicing supply chain management,” 
says Corey Billington, vice president for supply chain services at 
Hewlett-Packard Co. “Then some academic type told us our meth- 
ods were examples of real options in practice.” 

What caught the professor's eye was HP’s management of its 
Deskjet printer supply chain. As early as 1991, HP was using real op- : 
tions analysis to postpone finalization of the manufacturing : 
process, such as localization for individual markets, in a move that 
saves the company $72 million a year. 

“It costs more to do this on per-unit basis,” says 
Billington, “but we eliminate the uncertainty of what 
the French vs. German demand might be.” HP pays a 
1% premium in design and materials costs 
for the option of postponing differentiation, but the 
payoff comes in 5% to 7% savings in inventory costs. 

Getsupply, HP’s private Web-based procurement 
hub, represents another step in the company’s real 
options strategy. Getsupply provides HP with end-to- 
end supply chain visibility, a too! that enables HP to 
multiply its options by leveraging forward and spot 
markets. “You need that kind of visibility to move risk 
around the supply chain,” says Billington. “If we bear 





HP’s Corey Billington 
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chitecture. The CIO will doubtless have to explain to 
the chief financial officer how the benefits outweigh 
the costs. “Traditional analyses often break down 
when the return is cashless,” says Johnathan Mun, 
director of corporate finance at Decisioneering Inc., 
a Denver-based software development firm that’s 
working on incorporating real options into its deci- 
sion analysis packages. 

“Increased efficiency and lowered costs in office 
operations or the IT department can be debatable,” 
says Mun. “The real value may come down the road 
if the company exercises options to implement col- 
laboration or e-commerce modules. The strategic 
value is likely to be high and the costs to deploy 
those latter phases relatively low.” 

Under a real options approach, it wouldn’t make 
much sense to develop a full-blown IT architecture 
that couldn’t be tested until the whole thing was 
built. On the other hand, it might be wise to pay 
more upfront for a reusable modular platform as op- 
posed to paying less for a system that would benefit 
from just one business process. 

“You need to plan for a passing lane, in case you 
need to speed things up, and an exit ramp, in case 
you need to get off,” says Adam Borison, who until 
recently ran the real options practice at Pricewater- 
houseCoopers in New York. “And you also need a 
process on the back end to enforce this discipline.” 

Practitioners manage bundles of options like in- 
vestment portfolios. “The question is, how is the val- 
ue of the portfolio influenced by the staging and se- 


| quencing of projects?,” says McGrath. 
q golp } 


Israelit says he believes that CIOs should learn to 
present their proposals in just such a light. “Rigorous 
analytical thinking is more critical than ever to get 
through these turbulent times,” he says. D 
Buxbaum is a freelance writer in Elizabeth, N_J. 
Contact him at Pab00I@aol.com. 


Real Optionist 


: the risk, we will want a price concession in exchange for a fixed 
? commitment.” 


Drilling deeper into the supply network will also enable HP to 


: create markets for surplus inventory. For example, the company 

: may exercise an option to order more supplies than indicated by 

: forecast, provided it can get rid of the excess on the spot market. 
But that degree of flexibility isn’t available at every level of the sup- 


ply chain. 
“Instead of making a market for Deskjet housings, which has no 


fungibility, we would seek to create a market for the plastic pellets 
: that go into them,” says Billington 


Further off in the future is a marketplace that would 
allocate supply chain risk through tradeable options 
instruments. Presently being developed by the 
Peabody, Mass.-based electronics online marketplace 
Converge Inc., the future exchange could auction and 
trade capacity much as electric utilities do now, 
Billington says. 

In the meantime, HP continues to optionize its sup- 
ply chain with homegrown systems as well as with 
software from Vivecon Corp., a Mountain View, Calif.- 
based start-up founded by Stanford University profes- 
sor Blake Johnson. 

~- Peter Buxbaum 
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Potential Applications 
For Real Options 


ENERGY EXPLORATION. Decision-makers must consider 
whether to continue exploration or begin development, size 
production facilities before productivity of a field is known 
and figure out the value of leases. 


UTILITIES. Deregulation and the unbundling of generation, 
transmission and distribution assets lead to company deci- 
sions on whether to shut down or start up, construct or sell 
generation facilities, or enter or exit operations in certain 
geographic markets. 


TELECOMMUNICATIONS. Companies confront choices of 
optimal bandwidth construction and utilization, alliances 
whose benefit streams are uncertain, and technologies with 
unproven market demand, all under conditions of regulatory, 
market and technical uncertainty and heavy demands on 
capital. 


PHARMACEUTICALS. Decision-makers grapple with 
whether to go forward with stages of risky drug develop- 
ments, how much to pay for uncertain technologies and 
whether to accelerate development to be first to market 


ENTERTAINMENT. TV programmers option prime broad- 
casting slots, reruns and sequels for high-performing shows 
to significantly increase the value of a program's life cycle. 
Should an underperforming show be switched or killed? 
Seinfeld was a dud its first two seasons until it was moved to 
Thursday nights. 


k For a bibliography of related articles on real 


A options reasoning, go to: 


Link www.computerworld.com/q?25894. 
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IT jobs will continue to be professionally 
and financially rewarding in 2002, just 
not for as many people. By Matt Hamblen 


FTER CHUGGING ALONG 
through the late 1990s, the job 
market came to a screechir 
halt last year, throwing many 
people off. For at least the first | 
half of 2002, those bruised and 
battered workers will have a hard time 
climbing back on board the job train. 
Take the skilled IT worker who left a 
clothing retailer two years ago to set 
up shop as an IT consultant. 
“He had worked for a competitor be- | 
fore going off on his own but showed _| 


dustries, should a layoff occur. 
When the dot-coms exploded in 
1999, many people left stable IT jobs. 

d where are they today?” Dell’Anto- 
nia muses. “Some are wishing they 
were back, but a lot of people don’t 
have the opportunity to go bé 


| Stable Salaries 


The recession has obviously hurt 
the IT job market, D a says, 
but the impact on IT jobs in the ap- 
parel business, specifically, is a 


up at our door recently saying ———/, “mixed bag.” OshKosh ex- 


[that] if we would pick up ex- ANY 





pects to do OK in 2002, he 





penses, he’d work for free,” re- HIRING says, partly because the cloth- 
calls Jon Dell’Antonia, vice ier’s business is half retail and 


president of MIS at OshKosh _ FORECAST half wholesale. 






B’Gosh Inc. in Oshkosh, Wis 
Talk about a sign of the times 

And the times certainly are a-chang- 
ing. With the nation and much of the 
world in a major recession, 2002 looks 
to be a time defined by more layoffs, 
including cuts in IT. If you’re among 
the ranks of the unemployed, finding a 
new job will continue to be a maior 
challenge. 

Forget seeing a turnaround soon. 
Rather than job growth or even job sta- 
bility, fewer IT jobs will be available, 
employment experts believe, as many 
companies reduce their IT depart- 
ments even further through more lay- 
offs or attrition 

Granted, the picture won't be entire- 
ly dismal. There will be a premium on 
IT security professionals, for example. 
But employers are putting job seekers 
on not In these tight times, they ex- 
pect real bang for their buck. The pres- 
sure will really be on IT employees to 
improve performance. And while you 
keep one eye on your job, network 
with others in the industry and stay on 
the lookout for IT jobs in related in- 






“In the third quarter of 
2001, we were having a really good 
year,” Dell’Antonia notes. 

Fortunately, IT professionals can look 
forward to retaining their salary levels 
in 2002: Salaries for most job titles in IT 
will increase by approximately 4% on 


| average, according to surveys and top- 


leve] IT managers at several companies. 
But gone are the days of double-digit 
pay increases, hiring bonuses and full 


| benefits slates. Training budgets are 


also likely to remain flat. 

While the news focuses on layoffs, 
job seekers can’t afford to be deterred, 
says John Madigan, vice president of 
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Most firms, even 
those experiencing 
layoffs, will still 
need good people 
in key areas. Target 
good, solid firms... 
that are likely to be 
around providing 
jobs in the future. 


JOHN MADIGAN, VICE PRESIDENT OF 
CORPORATE HUMAN RESOURCES, 
THE HARTFORD FINANCIAL 
SERVICES GROUP 


corporate human resources at The 
Hartford Financial Services Group Inc. 
Madigan helps coordinate hiring for an 
IT staff of 3,500. The Hartford, Conn.- 
based company currently has 60 IT job 
vacancies — half the number of open- 
ings it had a year ago. Madigan says 
some previous job vacancies were re- 
duced through attrition, and recruiting 
was much easier in 2001 than in previ- 
ous years. 


Key Skills in Demand 

“There’s a much more rigorous ap- 
proval process for filling jobs,” Madi- 
gan says. “But here’s an inside tip for 
job seekers: Most firms, even those 
experiencing layoffs, will still need 
good people in key areas. It’s best to 
target good, solid firms ... that are 
likely to be around providing jobs in 
the future.” 

Officials at Bethesda, Md.-based 
Marriott International Inc., which was 
hit hard economically by the Sept. ll 
terrorist attacks, say IT hiring will be 
diminished compared with levels of 
several months ago. But they declined 
to be more specific. 

However, Marriott will be hiring 
people to fill jobs involving enterprise 
applications, Internet programming, 
project management and senior lead- 
ership, according to George Hall, vice 
president of human resources for IT. 
And Marriott plans to continue to 
provide IT workers with mission- 
critical training and competitive 
compensation. 

“Certain skills are still highly valuable 
and recruited,” says Hall. Still, he warns 
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that job seekers “should be more flexi- 
ble and be willing to take on unusual as- 
signments that support a company’s 
short-term business needs in this 
changing economy. ... Given that de- 
mand is not as great, employers can be 
more selective and will want to see sta- 
bility as well as skills in their recruits.” 
Several managers say IT job seekers 
haven’t reached the level of despera- 
tion that they experienced in the 1980s. 
However, Len Tenner, CIO emeritus 
at Hewitt Associates LLC, a human re- 
sources outsourcer in Lincolnshire, IIl., 
says he has worked in IT since 1961 and 
has not seen a “more confused time.” 
“We have a weak economy, terror- 
ism, the burst of the dot-com bubble 
and the Internet infrastructure bubble, 
and new technologies that are not well 


understood — all at the same time,” 


says Tenner. “That is unprecedented in 
my lifetime.” 

To overcome the general uncertain- 
ty and the doom and gloom that ac- 
companied the latest unemployment 
statistics, Tenner recommends that job 
candidates focus on the things they 
can control, such as getting training in 
hot areas. 

Increasingly, training is being of- 
fered at regional sites to cut down on 
travel costs, and many classes are be- 
ing offered over shorter time periods 
to make them more convenient and 
less expensive. 

Many technology associations offer 


| one- or two-day seminars for nominal 


fees, says Lily Shue, information sys- 
tems manager at Sony Electronics Inc. 
in Park Ridge, N.J., and chairwoman of 


| the Rolling Meadows, IIl.-based Infor- 


mation Systems Audit and Control As- 
sociation and Foundation. 

Shue says candidates need to pay 
constant attention to the news monitor 
business and technology trends. And 
job seekers should keep their eyes 
open to new opportunities, perhaps in 


| different industries than the ones 


they’re used to. 


Patience a Virtue 
The year ahead may be a long one 
for job seekers, some staffing consul- 


| tants predict, especially if the reces- 


sion gets worse. 

“Patience is required, as the pace of 
employer decisions will be slow,” Ten- 
ner says. 

The time required to get hired at a 


| job paying more than $100,000 could 


be more than a year, compared with six 
to nine months required two years ago, 
says Marc Lewis, managing director of 
IT hiring at Christian & Timbers, an 


| employment firm in Stamford, Conn. 





Everyone — from managers to re- 
cruiters — stresses the value of net- 
working, for job seekers and for em- 
ployed IT workers alike. “Personal 
networking is key and may be the 
most important route to placement,” 
Tenner says. 

Employment seekers may have to 
adopt a different mind-set when seek- 
ing work in 2002, advises Jerry B. Hale, 
director of global business systems 
at Kingsport, Tenn.-based Eastman 
Chemical Co. 

“Job seekers can expect companies 
to have a lot higher expectations now, 
and companies will be much less tol- 
erant of poor performance,” Hale says. 





“Business skills and accountability 
and a desire to align the business will 
be important in the future.” 

And if you think all is forgiven in IT 
when it comes to recent job-hopping, 
think again. Employers will take a 
more skeptical view of job-hoppers, 
whom they associate with higher train- 
ing costs, says Jon Ricker, president 
and CIO of Limited Technology Ser- 
vices, part of retailer The Limited Inc. 
in Columbus, Ohio. 

Ricker also urges IT workers to build 


| up so-called soft business skills now to 


enhance their future marketability by 
accepting assignments that involve 
communication and consulting skills. D 


Making the Best of a Bad Job Market 


Hiring consultants, analysts and 
IT managers offer the following 
tips on managing your career dur- 


ing the recession: 
@ First, and most obvious, it’s best 
not to leave your present job for 
the time being, unless you're forced to. 

“This recession can last for a long time,” 
says Fran Quittel, a staffing consultant at 
Frances Quittel Inc. in Emeryville, Calif., and 
Computerworld’s Career Adviser columnist. 

“Lhate to say this, but if there’s another ter- 
rorist incident, it could make the the recession 
last longer. There's a jot of mental stuff in this 
job market, just like the boom in dot-com was 


mental the other way,” Quittel says. 
Consider getting training or certi- 


®@ fication in some of the hotter job 


categories in IT, including security and disas- 
ter recovery. These are areas where salaries 
are showing the best increases and where 
there's a clear need for hiring this year. 

Regarding security, IT managers “are hir- 
ing security-skilled systems admins as fast 
as they can” but showing ess mercy with 
pure managers who can't provide technical 
sawvy, says Alan Paller, director of research 
at the SANS Institute in Bethesda, Md. 

Paller recalls one example in which a 
chief information security officer was told 
he was being fired because he couldn't hard- 
ena firewall. 

David Foote , an analyst at Foote Partners 
LLC in New Canaan, Conn., says that securi- 
ty jobs will be most in demand starting in the 
third quarter, when companies will begin to 
realize the valuable role security plays in at- 
tracting customers. 

It will be technologists in security, as well 


STAY PUT 


GET TRAINING 


as business managers, who see the critical 
value of security, says Foote, who is also a 
Computerworld columnist. 

In addition, he predicts an uptick in net- 

work and enterprise data services jobs. 
© Network, stay in touch, and stay 
flexible. 

Katherine Spencer Lee, executive director 
of RHI Consulting in Menlo Park, Calif., says 
the current recession isn’t as tough as that of 
the 1980s, when job candidates would try to 
offer her money under the table in return for 
priority consideration in job placements. 

“The economy is as bad as you make it, 
but every single day, you have to keep read- 
ing what's happening in the news and how 
that impacts technology. Keep your skill set 
hot and current,” she says. 

Lee and Quittel point to the possibility of 
changing industries to find work. 

“Think about how well the mortgage com- 
panies are doing now,” Lee says. She also 
urges IT workers to look at the biotechnology 
and health care fields. In those markets, the 
work ranges from cloning and the creation of 
human skin to the development of pharma- 
ceuticals and the implementation of new 
government health standards. 

To illustrate the importance of staying 
flexible and keeping an open mind, Quittel 
recalis one IT worker who was laid off from a 
software company in Silicon Valley and sent 
out 500 résumés. Almost every day, on the 
way to job interviews, she drove past a com- 
munity college. 

“One day she said to herself, ‘Gee, I'd 
like to work there,’ and got a top IT job,” Quit- 
tel says. “The lesson is that she had an idea 
outside what was a normal commercial- 
sector job.” 


REACH OUT 


- Matt Hamblen 
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Some say the IT job market is the worst it's 
been ina decade. Others say it's worse than 
ever. In either case, IT pros should brace for 
more bad tidings in 2002. By Lee Copeland 


| 
| 
| 


ERRY LESLIE GOT HIS PINK SLIP 

in August. And after being 

downsized from a start-up tech- 

nology integrator five months 

ago, this unemployed systems 

administrator says new job op- 
portunities aren’t just slim, they’re ra- 
zor thin. 

“This is the worst job market I’ve 
ever seen,” says Leslie, who’s based in 
Bellaire, Texas, and has 18 years of sys- 
tems administration experience under 
his belt. “It’s very unusual, especially 





| for the IT industry. But it’s not just IT. 


I’ve never seen this many layoffs be- 
fore,” he says. 

Budget cutbacks. Staff layoffs. Proj- 
ect slowdowns. None of this is unheard 
of in IT. But few, if any, have 
seen anything like now. 

“Everybody who has been 
around for a long time will tell 
you that it’s not been like this 
before,” says Eric Dean, CIO at 
United Air Lines Inc., a unit of Elk 
Grove Township, Ill.-based UAL Corp. 
“The airline industry goes though con- 
tractions and expansions every seven 
years, but this is on a scale that’s never 
been seen before.” 

The turbulent economic climate, 
coupled with the disruptive wake of 
September’s terrorist attacks, is 
prompting IT leaders to rethink hiring 
practices to reflect a dramatically dif- 
ferent labor market and economy. 

The labor market is bloated with tal- 

eer 


| 
| 
| 
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ented, laid-off workers, and the econo- 
my is still limping through a recession. 
That unsavory combination is prompt- 
ing many firms to renege on year-end 
bonuses and cut back on corporate 


mes = perks such as training and 


ANNUAL 


HIRING 
FORECAST 


testing new technology, while 
IT resources and spending get 
reprioritized around projects 
that promise an immediate re- 
turn on investment. 

“Our bonus has been reduced this 
year,” acknowledges Ed Bell, CIO at 
Commonwealth Financial Network. At 
the Waltham, Mass.-based investment 
brokerage firm, the bonus pool stems 
from a calculation of the company’s 
revenue, income and customer growth. 
Since those numbers are down, the 
amount that managers have to offer 
their staffs has decreased. 

Now for the goods news: The time 
was right for a change, CIOs tell Com- 
puterworld, and productivity isn’t tak- 


™ 


IS THE WORST 
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ing a major hit. Even companies whose 
IT budgets have been marred with red 
slashes are still finding ways to reward 
and invest in their best workers. 

At Commonwealth Financial, for ex- 
ample, Bell says he’ll find room in his 
budget to reward the top performers. 
“For the stars, I will do everything I 
can to compensate them,” he says. But 
poor performers won't be getting star 
treatment. 

“When there was a hiring frenzy, 
you weren't able to spend the time 
looking at the individual’s contribu- 
tion,” says Bell, who uses the evalua- 
tion system promoted by Jack Welch, 
the legendary former CEO of General 
Electric Co. Under Welch’s system, 
Bell assumes that 20% of workers are 
his top performers, 70% do a good job, 
and the bottom 10% require an evalua- 
tion of their contribution. 

Like many CIOs, Mark Westling, 
CIO at National Pen Corp., a maker of 
promotional products in San Diego, 
says he believes the downturn presents 
an excellent opportunity to revisit pri- 
orities and refocus the staffers who im- 
plement those objectives. 

“In prosperous times, there’s little 
incentive to making tough choices,” he 
says. “During difficult times, there’s 
more incentive to make choices about 
the highest return projects, and that 
provides a real air of relief in the IT 
ranks because they know they’re mak- 
ing a valued contribution.” 

For example, National Pen has refo- 
cused resources toward completing an 
order entry application built with soft- 
ware by Oracle Corp. That application 
aims to reduce the time required to 
process an order from 12 minutes to 
between three and six minutes. “We 
process a million orders per year, so it 
could offer a significant reduction in 
labor costs if we cut the time by one 
half or one quarter,” says Westling. 

United laid off 20% of its employees 
— nearly 20,000 workers — in the fall. 
That deep cut included 30%, or ap- 
proximately 600 employees, of the 
Chicago-based airline’s IT staffers. 

By decreasing the amount of appli- 
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Quite candidly, 
a lot of folks are 
very thankful 
that they have 
a job in these 
difficult times. 


MARK WESTLING, CIO, 
NATIONAL PEN CORP. 


cation change orders that the IT 
department processes by 90%, United 
was able to reprioritize its downsized 
development staff to high-priority 
projects, such as the revised reserva- 
tions system it launched in November. 

Traditional carrots and perks, such 
as bonuses and company-sponsored 
extracurricular events, may be gone, 
but CIOs report that they aren’t hear- 
ing complaints and that they aren’t 
waving a big stick. 

“One cold, sobering reality — that’s 
not a motivator for employees, but 
something to keep in mind — is the 
‘I’m thankful that I have a job’ factor,” 
says Westling. “Quite candidly, a lot of 
folks are very thankful that they have a 
job in these difficult times.” 

At United, IT workers won’t get 
their typical year-end bonuses, but 
Dean says he doesn’t expect cost cuts 
to have a negative effect on morale. 
“Everybody in the company under- 
stands that this is a very unusual time, 
which calis for very unusual mea- 
sures,” he says. 

Bell says he expects a demand for in- 
frastructure and networking skills this 
year, but he advises job seekers to pay 
attention to project management capa- 
bilities and the capacity to understand 
how technology impacts the business. 

“There are a lot of workers who are 








technically superior, but their contri- 
bution to the business isn’t as high as 


| those who understand it,” he explains. 


“Having certification in a technolo- 
gy” used to get workers a job, says 
Parvez Erani, vice president of infor- 


mation management at St. Mary Med- 


ical Center in Long Beach, Calif. “But 
these days, there are people with years 
of experience without work. You have 
to do more than pass a certification 


| test. You have to have real work expe- 


rience.” 
Erani also says that management is 
no longer willing to pay headhunters 


| to find qualified candidates, as ré- 


sumés flood in over the transom. Con- 
sequently, networking is providing one 
of the best means for job seekers to 
learn of new opportunities. 

Steve Finnerty, CIO at Northfield, 


| lll.-based Kraft Foods Inc., adds that 


membership in professional organiza- 
tions can improve a candidate’s 
chances of landing a job for two rea- 


| sons: Being a member can help estab- 


lish a network of contacts, and through 
that network, a candidate can better 
his knowledge about how technology 
projects are being vetted. 

“I don’t know how someone can find 
a job without networking,” he says. 

Leslie, who has been searching for 
work since he was laid off Aug. 15, 
couldn’t agree more. 

“There are some jobs out there,” he 


| says, “but people are finding them 


through personal networking, and not 


| through the Internet or headhunters.” 


When a position becomes available, 


| Maribeth Ward, vice president of IT at 


Chicago-based Parson Group LLC, says 


| the ideal job candidates are “utility in- 
| fielders” who can be tapped for a vari- 


ety of tasks, rather than sticking to one 


| project area. 


The utility infielder is “important 
with the economy being down and 
business flat,” says Ward. “Since we're 
not hiring new staff, it’s really impor- 
tant to have people willing to roll up 
their sleeves and either do something 
not in their job description or learn 
something new.” D 


TO COME? 


Tips for the 
Uncertain Future 


As the tough economic climate 
spills into the new year, IT leaders 
offer the following tips on how to 
navigate an equally tough 
job market in 2002: 


17 


CONNECTIONS 
Remember to network in order to stay 
current on what's going on in your skill area 
and assist in a job search down the line 


2 


RESOURCES 
Make use of company resources, such as 
educational training, and pursue new skills 
sets that are worth putting on your résumé 


© 


LEARNING 
If professional training isn’t available at your 
firm, look for opportunities to cross-train 
with a mentor at your company. 


0 


REFERENCES 
If a layoff should occur, don’t burn bridges, 
because a colleague or supervisor may 
assist in your new job search by providing 
professional leads and personal references. 


6 


FLEXIBILITY 
Be flexible as the business sets new IT 
priorities to survive during the 
economic downturn 


6 


UNDERSTANDING 
Hone your project management skills, so 
that you understand both the technical 
merits of a development project, as well as 
the business goals that need to be met 
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Domain Registrations Slow 


The Internet bubble-burst has reversed the 
once-booming domain registration market, 
with more .com, .net and .org domain names 
being deleted than added, according to an 
analysis of registrations in October and No- 
vember by SnapNames.com Inc., a Portland 
Ore.-based company that studies this market. 
The company expects the trend to continue, 
especially as registrars purge names that 
were once given away free as marketing pro- 
motions. There were 23.1 million .com domain 
names at the end of November, a decline of 
113,805 from the previous month. 


Report: IT Pays Off 


Accelerated investments in IT during the sec- 
ond haif of the 1990s have resulted in signifi- 
cant payoff in U.S. labor productivity, accord- 
ing to researchers at the Center for Research 
on Information Technology and Organizations 
(CRITO) at the University of California, Irvine. 

According to Ken Kraemer, director of 
CRITO, and Vijay Gurbaxani, professor of in- 
formation systems, successful IT investments 
require attention to management practices 
such as IT alignment with business strategy, 
employee involvement, total quality manage- 
ment and re-engineering. In addition, firms 
such as Dell Computer Corp. and Cisco Sys- 
tems Inc., which have decentralized internal 
operations but maintain solid technology links 
to external customers, suppliers and business 
partners, also tend to realize better returns on 
IT investments, according to CRITO. 


Energy Conference to 


Highlight Plant Security 


Energy plant security is one of the key topics 
planned for the upcoming Energy IT Confer- 
ence and Expo, sponsored by the American 
Gas Association, Edison Electric Institute 
(both based in Washington) and New York- 
based Energy IT magazine. 

The conference, to be held Jan. 13-15 in 
New Orleans, will feature Willard S. Evans Jr., 
vice president and ClO at Chicago-based Peo- 
ples Energy Corp. Evans will discuss steps 
that companies should take to meet current 
and future security challenges. He has assem- 
bled a group of experts who will examine the 
federal government's critical infrastructure 
protection initiatives and their impact on the 
energy industry. 

For more information on the conference, 
visit www.energyitexpo.com. 
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If your IT shop is “customer-driven,” you 
may have to haul it in for a tuneup. 
That’s the message from Anthony W. UI- 
wick, CEO at Lantana, Fla.-based soft- 
ware and consulting firm Strategyn Inc., 
in this month’s Harvard 

Business Review, where he 

explains the dangers of de- 

veloping products and ser- 

vices based on what cus- 

tomers say they want. UI- 

wick talked with Computer- 

world’s Kathleen Melymuka 

about how to determine 

what customers really need. 

Q: You dare to question the vision of the cus- 
tomer-driven company? 


suit, companies are often confused 
about what it means to be customer- 
driven. Many companies think they are 
customer-driven because they give 
their customers the features, functions 


| and solutions they ask for. This is 
| not being customer-driven; it is being 


customer-led. 
Being customer-driven requires a 


| firm to understand what the customer 


is trying to achieve and to devise fea- 
tures and solutions that deliver the 


| greatest degree of satisfaction — fea- 


tures that may be outside the cus- 
tomers’ knowledge base and beyond 
their initial comprehension. After all, 
how many customers initially asked for 
transistors, a 32-bit architecture or fax 
machines? 


Q: Why is it dangerous for an IT project 
manger to listen to customers too closely? 

A: It is important to listen closely to the 
customer, but the trick is to know what 


customers are rarely accomplished pro- 
grammers or engineers, or familiar 
with the latest advances in technology, 
their ideas are often confined to some- 
thing they have seen before — maybe 
in other products. Giving them what 
they ask for is likely to result in a “me- 
too” product. 

A qualified programmer is more like- 
ly to devise a breakthrough solution, 





A: Although the vision is worthy of pur- | 


to listen for and what to ignore. Since | 





Says companies that say they’re ‘customer-centric’ are 
in for rude awakening — they’re really ‘customer-led’ 


but only if the customers’ desired out- 
comes are understood. 


Q: What is the input you really want from 

your customers? 
A: You want them to tell you 
everything they are trying 
to achieve when using a 
specific application, prod- 
uct or service what we 
call their “desired out- 
comes.” In the software en- 
vironment, you_ typically 
obtain at least two sets of 
desired outcomes: one on 


| the function of the application itself 


and the second on the software interface. 

In some cases, you may want to ob- 
tain desired outcomes on the architec- 
ture as well. When discussing the inter- 
face, for example, users’ desired out- 
comes may include quick access to all 
options, minimal exposure to unneces- 
sary functions and quick re- 
covery in the event an input is 
made in error. Their desired 
outcomes may be satisfied 
with a drop-down box, hid- 
den menu items and an 
“undo” button. Typically, cus- 
tomers have anywhere be- 
tween 25 and 100 desired out- 
comes. 


Q: You describe a methodology for 
focusing on the outcomes cus- 
tomers desire rather than on the 
solutions they think they want. 
How do you plan an outcome- 
based customer interview? 

A: The objective is to capture a 
complete set of the customer’s 
desired outcomes. To achieve 
this objective, it is important to inter- 
view the most diverse set of customers. 
This may include users in different oc- 
cupations, assignments, locations or 
positions, or customers that use the 
product for different purposes or in dif- 
ferent environments. 


ignore.” 


Q: What's the role of the moderator in cus- 
tomer interviews? 
A: The moderator’s role is to ask the 





ANTHONY W. 
ULWICK: “It is 
important to listen 
closely to the 
customer, but the 
trick is to know 
what to listen 

for and what to 
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‘CEO: Help Your Customers 
~ Figure Out What They Need 


questions needed to uncover the cus- 
tomer’s desired outcomes, listen care- 
fully for the customers’ desired out- 
comes, and document and validate the 
outcomes with the customers. More 
than anything else, the moderator must 
be a good listener. 


Q: Describe how a good moderator might 
turn a vague customer statement into some- 
thing useful. 

A: Let’s use the interface as the example. 
The user of an application might say, “I 
want a drop-down list that shows me 
all the files I recently accessed.” The 
moderator may ask, “How will this fea- 
ture benefit you?” The user may say, 
“The list will make me more produc- 
tive.” The moderator may dig deeper by 
asking, “How would this listing make 
you more productive?” The user may re- 
spond, “Well, it would make it faster for 
me to access the files I use all the time.” 

The moderator may conclude with, 
“OK then, would it be fair to say that 
your desired outcome is to minimize 
the time it takes you to access the files 
you use most often?” With the user’s 
confirmation, this would be 
accepted as an outcome. 

If this level of understand- 
ing were not available, the 
programmer wouid most like- 
ly have given the user a listing 
of the files recently accessed. 
[But] the operations per- 
formed most recently and 
those performed most fre- 
quently are two different 
things. Many products today 
fail to make this distinction. 


Q: Does a moderator require spe- 
cial training? 

Yes. Success is dependent 
on some basic knowledge and 
practice. The moderator must 
know the difference between 
an outcome and a solution and be able 
to focus specifically on the collection of 
desired outcomes. Since the natural 
tendency is to focus on solutions, this 
may take a little time. A successful 
moderator must be able to let the cus- 
tomer talk through a situation to identi- 
fy the actual desired outcome. 

Again, the key is to be a good listener 
— to know what to look for and what 
to ignore. D 
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The key to being @ best place to work in IT isn't 
about money or stock options. It's about 

investing in the traming and career development 

of your workers and fostenng relationships. 
Computerworkd’s annual survey looks at the 

common elements found at thus year's top 

companies, such as Avon Products Inc. at No. 4. more 
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Want to know if something industry-shaking has 
happened in the last 15 minutes? Log onto 
www.computerworld.com for the up-to-the-minute 
news and information -- along with links to quality 
IT resources like these: 


Knowledge Centers. Quickly find the informa- 
tion you need to do your job -- all in one place. 
Check out the latest news and research links. Bone 
up on technical terms. Search for conferences and 
reports. Join a discussion, and more. 


E-Mail Newsletters. Subscribe online and get 
breaking news, commentary, and updates on over 
20 topics delivered to your desktop. 


Communities. Connect with peers and pros who 
care passionately about the same IT topics you do. 


IT Books. Browse and buy career-building IT 
books from your computer. 


Training, Events & Conferences. Find the latest 
in classroom and online educational programs. 
Plus a schedule of upcoming IT events. 


RFP Centers. Locate the IT resources you need to 
complete projects on time and on budget. 


Apply for a subscription to Computerworld at 
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supply chain improvements of the 
90s and the move to collaborative 
value chains are inescapable.” 


Recession? 
What Recession: 


Despite the talk about recession, terrorism and the col- 
lapse of more dot-coms, author Grady Means is decid- 
edly optimistic. Far from being squelched, the Internet 
revolution is still alive and strong and making a differ- 
ence in companies’ supply chains, he says. Computer 
world’s Mare L. Songini caught up with Means to dis- 
cuss the Internet’s impact on supply chain management. 


Please define metacapitalism. It’s basically a transfor- 
mation of capitalism, per se. For the past 100 
years or so, the concept of capitalism has been 
essentially to organize a company around a 
large capital base, with a physical plant and 
equipment and the investment of a lot of money 
to achieve economies of scale. But one of the 
observations made during the dot-com revolu- 
tion was you didn’t really need a factory or dis- 
tribution system. You didn’t need to have a large 


WHO IS HE? 


Grady Means, co-author 

of MetaCapitalism (John 

Wiley & Sons Inc., 2000), 
is a managing partner of the 
strategy consulting practice 
at PricewaterhouseCoopers 

North America in 
Washington. 





marketing operation. You can access people to 
make products for you so you get much higher 
capital leverage. You can use the Internet to as- 
semble the supply chain. ... Companies like 
Ford are decapitalizing because they can access 
what they need over the Internet. 

Does the Internet really make such a difference to the 
economy? Before, you could fax or telephone sup- 
pliers, but you couldn’t get access to a vast supply 
base instantly. General Motors would use fax and 
[electronic data interchange] with dedicated 
suppliers. But today, you want as many bids as 
possible from suppliers competing against each 
other to create an auction among a large number 
of players who all know the rules of supply chain 
synchronization and just-in-time inventory. What 
the Internet does allow is a vastly greater number 
of them to bid at once and drive up quality more 
quickly and totally change the industry model. 

Any caveats after the dot-com crash? Business-to- 
business uses dot-com concepts of leverage but 
is a different business model for large companies. 
It allows them to leverage capital more effective- 
ly. Companies are moving supply chains to a vir- 
tual model. In spite of all the talk of recession, in- 
dustrial productivity is increasing. We’re talking 
about a long-scale economic transformation, with 
companies and organizations using new kinds of 
business models to drive much higher levels of 
productivity. Look at it from a historical perspec- 
tive. They’ve only been working on Transora [a 
consumer products industry exchange] for a 
year to 18 months. There are quite a few private 
company trade exchanges. As we move forward, 
the Fords and Procter & Gambles are adjusting 
their view on how to use both their consortium 
and private exchanges. The game has been 
changing aggressively. It’s working faster than 
any other industrial change in history. 

Will the terrorist attacks slow the progress of meta- 
capitalism? It will accelerate it. One thing we 
learned is that having large, centralized physical 
assets is not a good model. What you want to do 
is distribute assets and distributed capacity for 
any given supply chain. You're going to find 
people working through lessons learned, in terms 
of disaster planning and recovery, and they are 
going to move to more distributed models. I 
think companies will go for more dynamic mod- 
els that allows [them] to shift very quickly. Gov- 
ernment, particularly in the defense arena, needs 
to adapt quickly to these best practices and de- 
velop collaborative relationships to improve 
performance as well as to supply the war effort. 


| How can companies survive in this new environment? 


They have to understand that this world exists. 
... You must figure out your economic model 
before you even get to the technology. Leverage 
your brand and leverage your capital. Compa- 
nies may find owning physical assets doesn’t 
generate much value. Work through your busi- 
ness model and how you want to play using 
Web-based approaches and technologies. It may 
be difficult to connect to an exchange, but that’s 
a relatively minor problem. ... The supply chain 
improvements of the 90s and the move to col- 
laborative value chains are inescapable. D 








‘BUSINESSC AREER: 


Dear Career Adviser: 


I was recently laid off as a business analyst in a client/ 
server environment and am wondering about the viabili- 
ty of returning to school to finish my four-year degree, 
which would be quite expensive. 


When I first started going to 
college, I was told there is al- 
ways a high demand for com- 
puter professionals. Now no 
one seems able to find a place 
to intern. 

— BACK TO SCHOOL 


Dear School: 

In spite of the current eco- 
nomic downturn, there is still 
a shortage of skilled IT pro- 
fessionals. Plus, given today’s 
environment, Congress and 
the government will probably 


Seattle-based 
Safeco Corp. 
has named 
YOM SENE- 
GOR as its 
CIO. In this 
role, Senegor 
will develop 
and imple- 
ment IT efforts 
that improve process operations 
and customer accessibility. He will 
report to Mike McGavick, president 
and CEO. Senegor joins Safeco from 
Accenture Ltd., a Hamilton, Bermu- 
da-based global consultancy. As 
central region managing partner for 
insurance at Accenture, he helped 
many of the U.S.’s largest insurance 
companies develop automated un- 
derwriting and integrated comput- 
ing systems. Safeco is the 12th- 
largest property and casualty insur- 
ance carrier in the U.S. 


SENEGOR 


800.com Inc. has hired HOLLY 
FILES to fill its newly created CIO 
position. She will report to Greg 
Drew, president, founder and CEO. 
Files will oversee information ser- 
vices, technology systems, cus- 


increase the need for U.S.- 
trained workers by reducing 


| the number of H-1B visas 
| available for foreign workers, 
says Grace Gentry, president 


and chairwoman of the Open 
Door Education Foundation, 
| an Alexandria, Va.-based non 
profit organization formed 
by the National Association 
of Computer Consulting Bus- 
inesses. 

But before you return to 
| school, you might want to ex- 
plore some of the testing op- 





tions on Open Door’s site, 


| tomer service and internal opera- 
tions. She previously served as vice 
president of woridwide service at 
NetIQ Corp., an infrastructure man- 
agement and intelligence systems 
provider in San Jose. 800.com, an 
Internet retailer of consumer elec- 
tronics, movies and music, is based 
in Portiand, Ore. 


Miami-based 
Burger King 
Corp. has 
promoted 
RAFAEL 
SANCHEZ 
from vice 
president of 
technology 
and infra- 
structure to ClO. Sanchez will over- 
see all aspects of IT. His duties will 
include providing support for the 
company’s restaurant and enter- 
prise systems and to its marketing 
and operations divisions. He will re- 
port to Chief Financial Officer Ben- 
nett Nussbaum. Prior to joining 
Burger King, Sanchez was director 
of technology at Minneapolis-based 
food company The Pillsbury Co. 


SANCHEZ 








www.keysZ2it.org, 
to gauge your apti- 
tude for and inter- 
est in specific ca- 
reers within IT 
while also investi- 
gating how to fi- 
nance your return 
to school. 


Readers Write: 
Expanding 

on my advice to 

“Temp to Perm” 

{Career Adviser, 


WILLIAM R. DERRICK has been ap- 
pointed CIO at Corixa Corp., a Seat- 
tle-based developer of immunother- 
apeutics. Derrick will report to CFO 
Michelle Burris and will oversee 
strategic direction on IT initiatives. 


| Derrick previously served as vice 


president of operations at Edifecs 
Inc., a business-to-business ser- 
vices provider in Redmond, Wash. 


| STEPHEN GLASS has been named 


ClO at Independence Comunity 
Bank in Brooklyn, N.Y. He will re- 
port to President and CEO Alan 
Fishman. Glass previously worked 
at IBM Global Services in the U.S. 
and Australia helping companies 


| integrate IT systems after mergers 


and acquisitions. Independence 
Community Bank Corp. is the hold- 
ing company for Independence 


| Community Bank. 


MARTIN LARSON has been promot- 
ed to senior vice president of sales 
and marketing at Vancouver, 
Wash.-based Consolidated Freight- 
ways Corp. Larson, who was previ- 
ously vice president of e-commerce 
and CIO, will retain his e-com- 
merce duties, which are strongly 
tied to the sales department. He 
will report to CEO Patrick Blake. 
His new position is one of three top 


| 


FRAN QUITTEL is an 
expert in high-tech 
careers and recruitment. 
Send questions to her at 
www.computerworld.com/ 
career_adviser. 





Oct. 29] regarding PeopleSoft 
programming skills and job 
opportunities, Ed Hiney, a 
board member of the People- 
Soft Southern New England 
Users’ Group (www.ps-snug. 
org), offers a few comments. 
“I have been programming 
PeopleSoft HRMS and finan- 
cial applications for five 
years,” says Hiney, “and have 
never needed Java, C, C++ and 
HTML. Even for Web-based 
PeopleSoft 8, de- 
velopment is done 
through propri- 
etary develop- 
ment tools [Peo- 
pleTools and Ap- 
plication Engine]; 
PeopleCode, a Vi- 
sual Basic-like 
programming lan- 
guage; a [third- 
generation lan- 
guage] report 
writer/program- 
ming language 


However, break- 


leadership roles within Consolidat- 
ed Freightways. 


InsureZone Inc. in Fort Worth, 
Texas, recently promoted PAUL 
HARRISON to the position of C10, 
reporting to CEO Russell Reid. In 
this role, Harrison will manage In- 
sureZone’s technology infrastruc- 
ture, including network and tele- 
communications systems. Previous- 
ly, he was manager of development 
at Revenue Technology Services 
Corp., a transportation software de- 
veloper in Irving, Texas. InsureZone 
is an agency that specializes in in- 


| surance for small businesses. 


online retailer 
SmartBar- 
gains.com 
has named 
RICHARD 
SECOR as its 
ClO, reporting 
to CEO Carl 
Rosendorf. 
Secor previously served as CIO at 
LearningStar Corp., a children’s ed- 
ucational products company in 
Monterey, Calif. Before joining 
LearningStar, Secor worked at di- 
rect marketing services provider 
WA Wilde Co. in Holliston, Mass., 


SECOR 


[SQR]; and Cobol.” 
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ing into PeopleSoft, Oracle 
and SAP jobs can be daunting, 
particularly without program- 
ming skills. First of all, teams 
usually have five to a dozen 
technical people for every one 
or two business analysts. Sec- 
ond, it isn’t possible to take 
classes part time and become 
certified in PeopleSoft, Oracle 
or SAP. 

In southern New England, 
Oracle database administra- 
tors, as well as wide-area net- 
working and Unix administra- 
tors, are hot, but consulting 
firms aren’t hiring, says Hiney. 

So if “Temp to Perm” really 
wants PeopleSoft work, she 
will need persistence in scout- 
ing out opportunities, perhaps 
through a PeopleSoft partner 
(www.peoplesoft.com/corp/ 
en/about/pspartner/partner_ 
profiles.asp), by attending 
local PeopleSoft user group 
meetings or by expanding 
her network through http:// 
groups.yahoo.com/group/ 
peoplesoft-fans. D 


first as director of information ser- 
vices and later as C10. 

SmartBargains.com has also 
hired LAWRENCE CHIANGO as 
its new vice president of technolo- 
gy. Chiango, who will report to 
Secor, will be responsible for tech- 
nology operations, software devel- 
opment, systems design and imple- 
mentation. Chiango was previously 
vice president of technology and 
systems at catalog retailer Corn- 
erstone Brands Inc. in West 
Chester, Ohio. 

Gordon Brothers Group LLC, a 
Boston-based retail restructuring, 
finance and advisory firm, owns 
SmartBargains. 


Seattle-based Starbucks Coffee Co. 
has appointed BRIAN CRYNES as its 
CIO. He will report to CFO Michael 
Casey. Crynes will be responsible 


| for directing worldwide investments 


in technology and infrastructure, in- 
cluding integration of supply chain 
management, customer relationship 
management, sales, human re- 
sources and financial service sys- 
tems. Previously, Crynes was CIO at 
Coca-Cola Amatil Ltd. in Sydney, 
Australia, where he integrated cus- 
tomer-centered e-business systems 
for various markets in the Asia- 
Pacific region. 
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LAT 


MIXED MESSAGES 


Technology users are divided over 
the role of instant messaging in the 
workplace. Some see it as a quick 
communication tool, but others say 
it’s only a distraction. PAGE 40 


QUICKSTUDY 


Perl is an open-source scripting 
language whose syntax is similar 
to that of C. Created in 1987 to sim- 
plify systems administration tasks, 
Perl has evolved into a powerful 
and flexible programming environ- 
ment. Learn more in this week’s 
primer. PAGE 42 


FUTURE WATCH 


Most computers are idle most of 
the time, but researchers are find- 
ing ways to harness that wasted 
power and anticipate users’ needs. 
PAGE 43 


When an operations manager 
chooses to ignore security vulnera- 
bilities, it’s the security manager 
who bears the responsibility for 
any incidents that may occur as a 
result. Mathias Thurman must de- 
cide whether to confront the man- 
age or let the matter drop. PAGE 44 


EMERGING COMPANIES 


FineGround’s Condenser speeds 
dynamic Web page loading by 
transmitting only changes to the 
user’s browser, and it doesn’t re- 
quire a browser plug-in. PAGE 46 
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NICHOLAS PETRELEY 


The Pundit Speaks 


HE BOOK OF DEUTERONOMY (loosely translated as “the sec- 

ond law”) says that if a prophet makes predictions that don’t 

come to pass, he is a false prophet and shall die. So let me 

make this abundantly clear: I am not a prophet; I am a pundit. 

We pundits follow the book of Neuteronomy (loosely trans- 
lated as “the null law”), which says that if a pundit makes a prediction and 
it does come to pass, his pundit’s license may be revoked. 


With that in mind, my first prediction is that the 
IT economy won’t recover in 2002. As long as the 
U.S. isn’t able to bring the war on terrorism to a sat- 
isfactory conclusion, the economy will stay ina 
slump. George W. Bush has done an excellent job 
so far, but he can’t undo decades of mishandled for- 
eign policy that has handcuffed the U.S. and painted 
it into a political corner. (Note to self: Reverse the 
order of that mixed metaphor; otherwise, the U.S. 
doesn’t have any hands free for painting). 

If I were a political pundit, I would explain why 
I believe this is true, but since I’m not, I'll assume 
that I can make outrageous political generalizations 
without having to support them. If you disagree, 
feel free to send me an e-mail, and Ill ignore it as 
soon as possible. 

The continuing weak economy leads me to my 
second prediction: We will see a renewed interest in 


from IBM and Sun. This will be a good thing, if it 
turns out to be true. 

As far as IT is concerned, network computing — 
especially Java-based network computing — has 
everything going for it. 

For one thing, it’s a terrific answer to one set of 
problems that has plagued IT since the rise of the 
Internet: Trojan horses, worms and viruses. Most 
worms, Trojan horses and viruses are introduced 
into a company’s network because it’s 
nearly impossible to stop employees from 
running infected programs on their desk- 
top machines. 

I say nearly impossible because it isn’t 
completely out of the question. But it’s 
far more costly than the network comput- 
ing model. 

If you have 2,000 employees, you have 
to protect 2,000 machines. If you take 
the thin-client approach to network com- 
puting, your users don’t run applications 
on their desktops — the IT department 
runs them at the server. So, you have to 





network computing by the end of the year, especially 


NICHOLAS PETRELEY is a 
computer consultant and 
author in Hayward,Calit. 

He can be reached at 
nicholas@petreley.com. 
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| protect only a handful of servers instead of thou- 
| sands of clients. 

The only problem with thin clients is that they 
load down servers and fail to exploit the inexpensive 
processing power you can put on every desktop. 

That’s why Java is the ideal answer. Java applica- 
tions run at the desktop, so they take advantage of 
today’s inexpensive processors while relieving the 
server of much of the work. Java applications are 
also platform-neutral, which encourages competi- 
tion. And Java doesn’t carry with it the same risks 
as native PC applications, because you can run Java 
programs in a restricted “sandbox.” 

Here’s the problem: The only way for network 
computing to gain momentum is if companies like 
IBM and Sun sell lots of client machines at a loss or 
at extremely low margins and then make up the lost 
revenue in server sales and support 

The plan is sound, but in the past, neither IBM nor 
Sun nor any of the other players have hung in there 
long enough to make it work. If they can be more 
patient this time, then I have two more predictions. 

First, Linux will make a big splash on the client. 
Linux is the ideal foundation for a network comput- 
ing client. It’s free, which means companies that sell 
network appliances don’t have to pay royalties to 
use it. It runs Xll, which means you can use it as the 
| basis of a graphical thin client. It runs Java, which 
means you can use it as the basis for a 
Java-based network computer. 

It’s also easy to configure a Linux box 
to run native programs in a safe sandbox, 
which means you can reap the benefits 
of network computing without having to 
take the thin-client or Java approach. 

And finally, Microsoft will try to turn 
the Xbox game console into a network 
computer that locks customers into 
Windows at the server. Unfortunately, 
this last prediction is such a no-brainer 
that it’s likely to come true, an event that 
would put my pundit license in jeopardy. D 














NSTANT MESSAGING (IM) 
conjures up images of bored 
teenagers using a software- 
based gossiping tool. Most IM 
programs are free, and few com- 
peting products can talk to one 
another, making skeptics wonder 
how useful IM is in the enterprise. 

But some business users, especially 
remote workers parked in front of 
desks all day and eager for contact 
with colleagues, have become avid 
users of IM as a way of quickly swap- 
ping messages and information. 

The jury is still out on whether IM 
increases workplace productivity. But 
even people who believe that IM isn’t 
an ideal business technology, with its 
rapid-fire text messages, acknowledge 
that there are problems with the alter- 
natives. E-mail and voice maii pile up, 
and a recent report found that more 
than 60% of business phone calls never 
reach their intended recipients. Such 
deficiencies may help explain the grow- 
ing number of IM users: According to 
Stamford, Conn.-based Gartner Inc., 
42% of business Internet users use IM 
in the workplace, even though 70% of 
IT departments don’t support it. 

While many executives aren’t con- 
vinced of its worth to the enterprise, 
“the tens of millions of people using 
IM through the Web must be getting 
some benefit,” says Dana Gardner, re- 
search director for messaging and col- 
laboration services at Aberdeen Group 
Inc. in Boston. 

Organizations like the U.S. Navy, 
which uses Lotus Software Group’s 
Sametime for secure, almost instanta- 
neous ship-to-ship and submarine- 
to-shore communications, say IM 
makes life easier. The Navy values 
having written transcripts of all orders 
and communiqués, which is possible 
using Sametime. 

Other early adopters concur that IM 
is a low-cost tool that helps their em- 
ployees communicate more effectively. 
But on the other side of the debate are 
businesses like a West Coast insurance 
company that opted not to roll out cor- 
porate IM software, because its claims 
agents were always on the go and did- 
n’t find it useful (see sidebar). 

Functionally speaking, almost every 
IM program is identical — users have 
a list of other people’s IM handles, 
and they click on a name to initiate a 
chat session. Then the two or more 
people write text messages that are 
delivered almost instantly and persist 
in a window on one another’s ma- 
chines. Sametime, which costs a few 
thousand dollars for a couple hundred 
seats, adds myriad features, such as the 
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ability for one user to see what’s on an 
other user’s screen (if permission is 
granted) or even to remotely manipu- 
late another user’s computer. A few 
hundred Sametime users can be hosted 
off just one dedicated Pentium PC or 
an ASA400. 

Corporate IM software includes fea- 
tures and functionality that are missing 
from the free versions. For instance, 
Sametime has high-level encryption 
and features such as a whiteboard 
that’s viewable by all participants. It 
also allows other participants to watch 
what someone is doing on his comput- 
er screen. In many cases, corporate IM 
software can alleviate the need for 
face-to-face meetings or at least make 





collaboration among dispersed groups 
much easier. And IM systems adminis- 
tered in-house can be a start to a cor- 
poratewide rollout of IM and presence 
information, according to Gardner. 

“T think it will become a critical cor- 
porate tool, but not for obvious rea- 
sons. IM has a strategic benefit that 
might escape people just looking at it 
as a chat tool,” Gardner says. “That is, 
you can take advantage of the presence 
detection that is incumbent with IM 
and broaden that presence to be a rich 
profile of how people should be com- 
municated with best.” 

One major impediment to IM gain- 
ing wide corporate adoption, especial- 
ly for large supply chain and business- 


to-business applications, is the lack of 
a single IM standard. The problem is 
political, not technical: free IM soft- 
ware makers earn money from adver- 
tising that runs across the top of their 
IM windows, and Dulles, Va.-based 
market leader America Online Inc. has 
been reluctant to let any other free 
software communicate with its AOL 
Instant Messenger, even when faced 
with government pressure to do so. 
And so, free software — such as In- 
stant Messenger, which alone claims 
more than 60 million users; ICQ, an- 
other AOL IM service; Internet Relay 
Chat; Yahoo Inc.’s Messenger; and 
Microsoft Corp.’s MSN Messenger — 
can’t talk to one another, and neither 
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can corporate (meaning not free) IM 
software, though Sametime does work 
with Instant Messenger. Nevertheless, 
IDC in Framingham, Mass., predicts 
that worldwide, corporate IM use will 
shoot up from 5.5 million users in 2000 
to 180 million users in 2004. 

For corporate use, having a closed 
IM system may be a boon. For in- 
stance, law firm Beckman & Hirsch in 
Burlington, Iowa, uses Lotus Sametime 
2.5, which keeps all IM communica- 
tions encrypted, with one PC acting as 
a dedicated server. 

“It’s really got security,” says senior 
partner and attorney 
David Beckman. 

Beckman says he was 
initially cool to the idea 
of using IM in the work- 
place. “My feeling about 
IM after watching my 
teenagers use it was that 
it was the curse of soci- 
ety, that it should be 
banned not only from 
the workplace but everyplace else you 
can think of,” he says. “Now I’ve done a 
180-degree turn.” 

Sametime lets the law firm’s remote 
workers maintain efficiency. For in- 
stance, they can collaborate remotely 
when writing documents, because the 
program lets users view what’s on one 
another’s PC screens. 

“It improves productivity,” says 
Beckman, because it lets him commu- 
nicate with more than one person at a 
time. In addition, IM makes telecom- 
muting seamless, he says. For instance, 
one of his paralegals telecommutes 
four days per week. “Most days, I don’t 
know she’s gone, because I [message] 
her when she’s here and when she’s a 
hundred miles away,” he says. 


Tool Versatility 

Though IM software is relatively 
simple, research conducted by Steve 
Whittaker, a senior research scientist at 
AT&T Labs-Research in Florham Park, 
N,J., found that as a tool, IM is highly 
effective at mimicking the complexi- 
ties of actual conversations. 

“One of the points we discovered is 
that what is apparently idle chitchat 
one minute can be work the next and 
vice versa. IM seems to be most sup- 
portive of any technology of the social 
processes, but that doesn’t mean it 
doesn’t support work as well,” says 
Whittaker. 

Employees at Newton, Mass.-based 
systems integration company Nerve- 
wire Inc. are increasingly using AOL’s 
Instant Messenger as a primary means 
of communication. 


42% of business 
eee eI 
UCR tee 
CURT a Oboe) | 
those users report that 
their IT departments 
CMa eal 
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“We actually encourage it and made | 


| it explicit by compiling the list [of user 


names] and sending it out to everyone 


| so they can just load it in [Instant Mes- 
| senger],” says Kipp Lynch, director of 

| user experience and manager of the 

| user interface group. 


Almost the entire company uses the 
program, though it was never agreed 


| upon per se as a standard. With the 


company spread over three floors of 


a building, Lynch says, it’s great for 


quick questions. 
“I used it a lot more when I was do- 


| ing work in Finland recently. It was 


nice to have some quick 
contact with the people 
you're used to seeing 
every day,” says Lynch, 
adding that Instant Mes- 
senger made it easy to 
check in with the em- 
ployees he manages and 
be available to answer 
questions. 

But IM can create 
awkward moments. For example, In- 
stant Messenger doesn’t automatically 
deactivate when a laptop it’s on is 


plugged into an LCD projector. During 


a recent Nervewire meeting, Lynch 
says, a co-worker’s childhood nick- 
name was revealed during a presenta- 


| tion when an IM message from an old 


friend popped up that read, “Hey hey, 
Bobbadoo!” 

Nervewire hasn’t settled on any sin- 
gle IM program and may switch off of 
Instant Messenger in the future, Lynch 


| says. “But instant messaging is a func 


tion that we want to keep,” he adds. 
The 6th Judicial Circuit Court in 
Florida in the counties of Pasco and 
Pinellas has been using QuickConfer- 
ence, a secure IM program for internal 


| Weaver. D 


use only, for more than seven years. 
According to Jim Weaver, senior court 


| systems analyst for the 6th Circuit, 
| when he ran a trial of IM software, it 
| proved to be a simple and inexpensive 


way for courtroombound judges to 


keep in touch with their judicial assis- 


tants, who might be down the hall or in 


| a building in the next county. 


“If there’s anything the judge needs 
to know while the trial is going on — 


| jury instructions, trial information — 


he can communicate with his [judicial 


| assistant] or a clerk from any comput- 
| er,” says Weaver, who runs Quick- 


Conference on two 256-MHz Pentium 


| 800 workstations for redundancy for 
| his 250 users. Pricing is about $800 for 


100 user licenses; every user license is 
also a server license, and the software 
works on both Macintosh and Win- 
dows computers. 

On the user’s PC, QuickConference is 


a simple program with features similar 


to those of most other IM programs. A 


| window shows which users are logged 
| on. Clicking on a user or a group starts 


an IM session, and a new messaging 
window appears on-screen. Users can 
send a message to one person or to a 
whole group. 

The informal aspects of IM can 


come in handy in the courthouse. For 


example, judges and clerks are legally 


| required to keep a copy of all their 


e-mails, but not their instant messages. 
“So if it’s something rea! quick and lit- 
tle... like “You want to go to lunch?’ 
where it’s not work-related, they may 
want to use QuickConference,” says 


Schwartz is a freelance writer in 
Arlington, Mass. Contact him at 


| Mat@PenandCamera.com. 


IM Use 


In companies where IM use 
is approved, what program 
do employees use? 


eA PERCENTAGE 
27% 


AOL instant Messenger DE% 
15% 
32% 


Lotus Sametime 


Yahoo Messenger 


Other 


Waiting for Convergence 


Some of the companies that are holding 
back on adopting IM are waiting for the 
technology to converge with other meth- 
ods of electronic communication. The 
head of business disaster recovery at a 
large West Coast insurance company. who 
spoke on condition of anonymity, says his 
help desk and repair workers evaluated 
several instant messaging products - and 
passed on adopting any of them. 

“During emergencies, they thought in- 
stant messaging might be a really cool 
thing, but it became cumbersome, be- 
cause people would run off and use the 


cell phone and not really type,” he explains. “Again, 
you're trying to do other things, not always answer 
some guy's message.” 

His workers often aren't in front of a PC, so they 
prefer to communicate by using the walkie-talkie- 
style feature of cell phones from Nextel Communi- 
cations Inc. “We use those extensively,” he says. 

Among his business peers, talk of IM is “mostly 
execs talking about their kids using AOL and how 
cool it is, but | have not heard about it positively in 
the work environment,” he says. 
rate IM and cell phone features, says Steve Whit- 
taker, a senior research scientist at AT&T Labs- 


Research. But there are major architectural 
and political issues to overcome. 

“Ultimately, you'll see programs that will 
let you use IM to set up a phone call,” he 
says. Through one software program or fu- 
ture wireless phone or personal digital as- 
sistant, users could query someone's avail- 
ability via 1M and then initiate a call or send 
an e-mail if the person isn't there. 

“I'm certain that at some point, all these 
various systems will be very well-linked. 
With iM, | think the phone link is a key 
one,” Whittaker says. 

~ Mathew Schwaitz 
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HOT TRENDS & TECHNOLOGIES IN BRIEF 


Perl 


DEFINITION 


Perl is an open-source scripting language whose 
syntax is similar to that of C. Created by a single pro- 
grammer in 1987 to simplify systems administration 
tasks, Perl has evolved into a powerful and flexible 
programming environment. It has strong text-manip- 
ulation capabilities and is especially useful for devel- 
oping Common Gateway Interface programs. 


BY SHARON MACHLIS 
IKE MANY Linux and 


Macintosh fans, 


devotees of Perl love | 


their technology and 


defend the language | 


passionately. 
Case in point: One major 


Perl user group doesn’t refer to | 
its members as “users” or even | 


Instead, it 
them “Perl Mongers.” 


“advocates.” 


“Perl attracts people because 
it’s full of nooks and crannies,” 
says Jon Orwant, editor of The 


Perl Journal and a member of | 
advisory | 


the Perl Mongers 
board. “The motto is, “There’s 
more than one way to do it, 
and the language 
writing 


allows a 
approach. 
There’s always room to learn 
about neat new ways to do 


something.” 


creative 


Perl is also a good choice for | 


speedy application 


ment, advocates say. 


develop- 


Small but Complete 

Initially developed by Larry 
Wall in 1987 to automate some 
Unix administration tasks, Perl 


has become a popular environ- | 
ment for creating a wide range | 


of applications. It’s relatively 


easy to write small scripts for | 
simple tasks, but the language | 
is powerful enough to satisfy | 


top-notch code jocks. 


“Other languages strive to | 
be elegant or very small; Perl | 


strives to be complete and easy 


@ Are there technologies or issues you would like to learn about in QuickStudy? Please 


calls | 


to use,” wrote Paul Hoffman 
in Perl for Dummies (Hungry 


Minds Inc., 2000). | 
Because Wall solicited con- | 
| tributions from programmers | 
worldwide for both the open- | 
source code and add-on mod- | 
ules, Perl has capabilities far | 


beyond its systems administra- 


tion roots. It has a robust de- | 
bugging environment, and its | 
| modules aid tasks such as pro- | 


cessing HTML and XML data. 


Perl includes object-orient- | 


ed capabilities, which many IT 


teams prefer for multiperson | 


development projects. Howev- 


er, programmers working on | 


simpler tasks don’t need to use 
objects, and thus the language 


is useful for both sophisticated | 


Web e-commerce tasks and 


| simple data manipulation. 


This code opens a text file, sorts the 
lines of data alphabetically and stores 
the sorted data in a new file: 


open (ORIGFILE, 
“unsorted.txt’); 


open (FINALFILE, “»sorted.txt”); 


print FINALFILE 
sort(<ORIGFILE>); 


close (FINALFILE); 
close (ORIGFILE); 


| Perlis one of the most popu- | 
| lar languages for creating Web | 


| applications — Amazon.com 
Inc. is among the many well- 
known Perl users — as well as 
for developing front-end ac- 
cess to databases and network 


500 uses Perl,” Orwant says. 
sider Perl 
manipulating and storing text 


Practical Extraction and 


porting Language, 


zations, Perl is attractive when 
compared with competing tech- 
nologies because it has been 
around for a while, so experts 
| have had plenty of time to fix 


» Powerful 
Flexible 
Relatively easy to learn 


« Allows quick application 
development 


Sometimes eclectic syntax 
« Large memory footprint 


Can be more cumbersome 
for some tasks than more 
specialized languages 


services. “Most of the Fortune | 
| sidered an 
Many developers still con- | 
an ideal environ- | 
ment for reading, analyzing, | 


| Tennessee 





bugs, stabilize the platform 
and find security holes. Its 14 
years trump many other well- 


| known open-source projects, 
| such as Linux and the Apache 
| Web server. 


Adam Faust, Web adminis- 


| trator at the Knoxville-based 


Valley Authority, 
recently used Perl to create a 
Common Gateway Interface 
for the power company’s Web 
site. He says the Perl archive 
network and modules were 
able to tie in to both the TVA’s 
Oracle database and its IBM 
WebSphere application server. 
“In a lot of cases, it’s more ma- 
ture than Java,” Faust says. 


Platforms Galore 

There are ports of Perl 
source code to run in most 
major environments, including 
Unix, Windows, IBM’s z/OS, 
OpenVMS, Novell Inc.’s Net- 
Ware and Macintosh. There’s 


| even a version for Windows 


CE, although there’s no port 
yet for Palm OS. Perl isn’t con- 
ideal choice for 
things such as embedded ap- 
plications because of its rela- 
tively large memory footprint, 


| notes Orwant. 


files. In fact, Perl stands for | 
Re- | 
although | 
the full name is seldom used | 
anymore. To some IT organi- | 





| for download 
| from the Comprehensive Perl 


ae 
rk 


Advocates of other, more 
specialized languages also say 
that Perl's general-purpose 
flexibility can make it a bit 
more cumbersome for certain 
tasks than more targeted lan- 
guages. 

For example, some users of 
the open-source scripting lan- 


| guage PHP say it’s easier to de- 


velop dynamic Web applica- 
tions in PHP than in Perl; PHP 


has some Web functions built 


in that Perl requires modules 


| to perform. However, many 


who develop their Web pages 
in PHP still turn to Perl for oth- 


| er back-end functions. 


Perl source code is available 
at no charge 


Archive Network at www. 
cpan.org, along with numerous 
modules. D 


To see a Perl script 
that generates HTML 
code for viewing a 
photo collection, see 


| www.computerworld.com/q?24469 


send your ideas to quickstudy@computerworld.com 
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PERL 
RESOURCES 


Perl.com: 
The Source for Perl 


www.perl.com 

From publisher O'Reilly & 
Associates Inc. in Sebastopol, 
Calif., this site features tutorials, 
code downloads, articles and other 
resources, as well as the latest 
Perl-related news. 


Comprehensive Perl 
Archive Network 


www.cpan.org/ 

CPAN is the place to get the latest 
versions of Perl, as well as num- 
erous open-source Perl modules 
and scripts. There are about 175 
CPAN mirror sites worldwide, and 
hundreds of developers have 
contributed code to the archive. 


Peri Mongers 

www. perl.org 

This major Perl user group's site 
includes sections about learning 
Perl and Perl-related jobs. Under 
the section called For IT Managers, 
you can find an outline of how Perl 
can reduce business risk. 


ActiveState Corp. 
www.activestate.com/ 

Along with offering Perl developers 
tools, Vancouver, British Columbia- 
based ActiveState has a free 
distribution of an enhanced version 
of Perl called ActivePer! for Linux, 
Solaris and Windows. 


Perl Tutorial 
http;//archive.ncsa.uiuc.edu/ 
General/Training/Perlintro/ 

A resource from the National 
Center for Supercomputing 
Applications at the University of 
Illinois at Urbana-Champaign. 


DevShed 

Perl tutorials from Developer Shed 
Inc. in St. George, Utah, including 
basics of the language and how to 
use some popular modules. 








COMPUTERWORLD January 7, 2002 


ICROSOFT CORP. re- 

searcher Eric Horvitz 

says he’s trying to fig- 
ure out “what a computer 
should worry about when its 
thumbs are twiddling.” Com- 
puters spend a huge amount of 
time twiddling their digital 
digits, wasting computational 
resources, he says. 

Computers shouldn’t be sur- 
prised by requests, especially 
from regular users, says 
Horvitz. For example, a PC 
running a network application 
could, while temporarily idle, 
prefetch and cache content 
from the Internet that a user 
may need later. Horvitz calls 
this “continual computing,” in 
which computers stay busy by 
anticipating users’ wishes. 

Ethernet inventor Bob Met- 
calf estimates that more than 
99% of the world’s computer 
capacity is wasted. He points 
out that modern microproces- 
sors, such as Intel Corp.’s Ita- 
nium, engage in speculative 
execution — in which some 
values are computed or re- 
trieved before they are needed 
— while doing other work. He 
says that principle should be 
moved to higher levels, to the 
operating system and to appli- 
cation software. 

“What’s done at the hard- 
ware level is really minuscule 
compared to what could be 
done,” says Metcalf, a partner 
at Polaris Venture Partners in 
Waltham, Mass. “This is a very 
old, deep idea that needs to be 
pursued much further than it 
has.” He calls the idea “antici- 
parallelism.” 

Metcalf argues for new con- 
trol structures in languages 
that make it easier for pro- 
grammers to enable anticipar- 
allelism. “We need constructs 
that would let you say, ‘Here’s 
a bunch of things that need do- 
ing, and here’s an expression 
of their priority, ” he says. 

Some elements of continual 
computing are embodied in 





TECHNOLOGY! 


Idle cycles can be used to prefetch 


and precompute information. 
By Gary H. Anthes 


IBM’s Autonomic Computing 
initiative, which aims to make 
systems self-managing. IBM is 
developing software that can 
reconfigure itself while con- 
stantly striving to optimize its 
own performance. “It will 
monitor its constituent parts 
and fine-tune workflow to 
achieve predetermined system 
goals,” according to IBM. 

In Horvitz’s model, continu- 
al computation requires the 
computer to examine possible 
actions and execute those 
with the highest “expected 
value.” Expected value is cal- 
culated by multiplying the 
probability that the user will 
want to take a path by the val- 





ie 


Bo 


ue of having it done in ad- 
vance. The greater the delay 
avoided, the greater the value. 
Many applications could 
take advantage of continual 
computation, Horvitz says. 
“Imagine if [Microsoft] Out- 
look maintained a set of prob- 
abilities based on you as the 
user — what you tend to do 
with e-mail messages, how 
you tend to view them, how 
you go back to them,” he ex- 
plains. Delays would be mini- 
mized because Outlook would 
perform many tasks before be- 
ing asked, Horvitz claims. 
“And Microsoft Project 
could sense when you are go- 
ing to call for an optimization 





~~ 


or when you are going to re- 
calculate things in Excel,” 
Horvitz says. “It might be do- 
ing this quietly in the back- 
ground when it had idle time.” 
A server-based application 
could build a statistical model 
of client activity in order to 
assess the probability that any 
given piece of information 
would be requested by a user. 
“Instead of waiting for a pull 
from the client, the system 
watches for any available 
bandwidth and then pushes 
down bits of data,” Horvitz 
says. “The client always looks 
in local cache first, and it 
tends to find things that are 
miraculously there.” 








Might users complain when 
the system anticipates incor- 
rectly? No problem, Metcalf 
says. “The basic idea with con- 
tingent computations is that if 
{they were] wrong, they would 
not be noticed, just thrown 
away,” he says. 


Unwanted Assistance 


But Horvitz can imagine 
software that’s more in-your- 
face with anticiparallelism. 
For example, it might offer as- 
sistance, change a display or 
bring up a new application it 
thinks you need. That could 
lead to “frustration with a 
‘smart’ system that just may 
not be smart enough,” he says. 
Microsoft is studying that 
problem and is developing 
ways for systems to assess 
their own fallibility on the fly 
and seek reactions and guid- 
ance from users, Horvitz says. 

Horvitz would also like to 
see operating systems engage 
in continual computing. An 
operating system running on a 
server would have to predict 
client behavior as well as ma- 
chine and network resource 
availability. Microsoft calls its 
work in this area the Crystal 
Ball project. 

Horvitz says his methods 
amount to load-balancing, and 
if all network-based applica- 
tions did it, demand spikes 
that sometimes slow Internet 
servers and routers could be 
greatly diminished. But, he 
warns, “if someday everybody 
does continual computation, 
those who do it more poorly 
than others will have slower 
systems, more latency.” 

Asked if all Microsoft prod- 
ucts will someday continually 
compute, Horvitz will only 
say, “You can be sure that ap- 
plications that use very inten- 
sive resources in a networked 
setting will be using proactive 
caching techniques, and con- 
tinual computation is probably 
the best way to do that.” D 


Anticiparallelism 
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TECHNOLOGY 


Vulnerability Draws 
Yawn From Operations 


Detecting a security threat is easier than persuading 
managers to act on it, as Mathias discovers 





BY MATHIAS THURMAN 
OU’VE JUST COMPLETED an 
extensive vulnerability as- 
sessment and have com- 
piled the results. You give 
the report to the appropri- 

ate manager, who decides not to imple- 

ment some of the corrective actions 

associated with a discovered threat. 

You want to be diplomatic about getting 

the discrepancies fixed, but 

you don’t want to alienate 

anyone or create enemies. 

What do you do? I recently 

faced this very problem. 

Here’s what happened and 

how I resolved it. 


A Problem Appears 

As part of a recent virtu- 
al private network (VPN) 
initiative, I performed a 
vulnerability assessment of 
about 1,500 remote laptops 
that will soon be loaded 
with the VPN client soft- 
ware. The laptops are all 
configured using the same 
software image, so by as- 
sessing one, I should be 


users haven’t changed anything on 
their laptops. 
I used automated tools for the assess- 


ment, including Internet Scanner from | 


Atlanta-based Internet Security Sys- 
tems Inc. and Nessus, the open-source 
vulnerability scanning software. The 
combination should address 95% of po- 
tential vulnerabilities. I also conducted 
a manual review of some of the permis- 
sions and other security-related settings 
available in the operating system. 

My assessment revealed a serious 
vulnerability in Windows NT. The con- 
figuration allowed the creation of a null 
session, which a hacker could exploit to 
connect to the laptops and read files 
without authentication. 

As I mulled these results at my desk 
one evening, I heard a knock at my 


MANAGER'S 
JOURNAL 


assessing them all — assuming that | 





door. Standing in the doorway with his 
arms crossed was the CIO. He wanted 
to know the status of a recent virus 
attack that had plagued our network. 
Unfortunately, I couldn’t give him the 
details he wanted. My security archi- 


| tecture position doesn’t include ongoing 


virus-detection responsibilities, so I 
referred him to the operations group. 

The message, however, was clear. 
When a security event oc- 
curs and the CIO gets in- 
volved, he will immediately 
turn to the security man- 
ager for answers and, in 
some cases, accountability. 
If an incident like this oc- 
curs only infrequently, I can 
live with it. However, if it 
were a weekly occurrence, 
the ClO might start to ques- 
tion my effectiveness. In 
other words, I could end up 
paying for mistakes made 
by the operations group. 

With that episode fresh in 
my mind, I went to a meet- 
ing with operations group 
managers to discuss server 
and workstation baseline 
image issues. I asked the security de- 
partment to scrutinize all baseline con- 
figurations prior to release and that sub- 
sequent changes to the baseline images 
also be submitted for reassessment. 

If a modification caused a departure 
from the previously secured baseline, 
then a retrofit of the existing infrastruc- 


| ture would need to be explored and 


executed to ensure that all installations 
remain within security best practices. 

I mentioned my recent laptop assess- 
ment and recommendations but met re- 
sistance from the operations manager 
in charge of laptop configurations. My 
assertion that the null-session problem 
was a serious vulnerability didn’t sway 
him. Instead of raising concerns and 


| putting him on the spot, I decided to 


take the issue off-line. 
After the meeting, I pulled the man- 





ager aside to impress upon him the 
severity of the security issues I had 
discovered. I also asked why he wasn’t 
considering incorporating my recom- 
mended corrective action into the base- 
line images and retrofitting the laptops 

He made several excuses, but his main 
rationale was that “in six months, we'll 
be upgrading to another operating sys- 
tem, and making dramatic changes at 
this point might cause more trouble 
than it’s worth.” 

This appeared to be a lose/lose situ- 
ation for a security manager. Do I force 


a confrontation with the manager or | 


keep quiet and risk the CIO’s wrath? | 


Pushing the Issue 

I decided to respond by introducing 
the manager to what I call a risk ac4 
countability document. If, at the end 


of the day, a manager doesn’t want to | 


implement a specified corrective action 
to a known threat, I create a document 
that delineates the vulnerability, the 
corrective action necessary and the risk 
of not closing the security hole. I then 
ask the manager to write down the jus- 
tification for why he has chosen not to 
perform the corrective action and sign 
it. That document goes to the CIO for 
signing. If an incident occurs based on 
a previously documented vulnerabil- 
ity, I have a document that in effect 
releases me from liability. 

No manager is going to sign this, of 
course. But the process forces the man- 
ager to be accountable for the risk in- 
volved in not fixing the problem. 

When the operations manager read 


through the document, he quickly de- | 


cided that the problems were serious 
enough to warrant a change and com- 
mitted to scheduling a retrofit of the 
vulnerable systems. 

I decided to push my luck. I wasn’t 
comfortable with the administrative 
password used on the desktop comput- 
ers, I said. It was easy to guess, it didn’t 
conform to the company’s password 
policy, and many employees already 
knew the password. Future plans would 
incorporate the use of SecurID tokens 
for administrative access to systems, 
but until then, the password should be 


| changed and controlled. The manager 
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SECURITYBOOKSHELF 


Securing Windows NT/2000 Servers 
for the Interet by Stefan Norberg and 
Deborah Russell (O'Reilly & Associates 
Inc., 2000): O'Reilly continues to pro- 
duce excellent reference material, and 
this book is another example. If you are 
responsible for Windows NT or 2000 
security, this book is a must-read. The 
authors provide details on many of the 
core elements of Windows security, 
from services to profiles and general 
best practices. Rather than simply 
telling the reader to check this box or 
stop that service, they describe the pur- 
pose of the service or option and any 
ramifications of disabling it. One caveat: 
The book doesn't include information 
on securing Internet Information Server. 


LINKS: 


operations and www3.ca.com/ 
Solutions/SubSolution.asp7ID=2846 : 
Enterprise management software suites 
such as IBM's Tivoli product and Com- 
puter Associates International Inc.'s 
Unicenter are powerful tools for imple- 
menting and managing security config- 
uration changes across desktop and 
server computers. 








www.nessus.org/index2 html: The 
source for the Nessus remote-scanning 
tool, which is available for Windows or 
Unix systems. 


www.iss.net: | used Internet Security 
Systems Inc.'s Internet Scanner in my 
security assessment. You'll find more 


information about it here. | 


frowned, clenched his teeth and agreed 
to address this problem as well. 

The manager was, in fact, quite em- 
barrassed about the password issue and 
asked me to keep it quiet. I agreed, as 
long as steps were being taken to rem- 
edy the situation. 

I think my method of dealing with 
this problem was fair and straightfor- 
ward. But perhaps I could have finessed 
the situation somehow without forcing 
the manager into a corner. Have you 
faced a similar scenario and come up 
with a better solution? If so, I invite you 
to share your experiences in the Secu- 
rity Manager’s Journal forum. D 


For more on the Security 
Manager's Journal, including 


Qui 
[me past journals, visit 


www.computerworld.com/q?q2000 


§ This week's journal is written by areal security manager, “Mathias Thurman,” whose name and employer have been disguised for obvious reasons. Contact him at mthurman@hushmail.com or go to the Security Manager's Journal forum. 
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Dynamic Web Pages 
Prepared for ‘Takeoff 


FineGround’s content-acceleration server 
speeds load times of dynamic Web data 


BY PIMM FOX 
OU WON’T FIND 
any mention of 
FineGround Net- 
works Inc. or 
caching technolo- 

gy sandwiched between the ar- 
ticles about Cameron Diaz or 
Madrid in Sky, Delta Air Lines 
Inc.’s in-flight magazine. But 
without FineGround’s ability 
to speed up the delivery of dy- 
namic Web page content, your 
trip might lack food, beverages 
or aclean cabin. 

Atlanta-based E-Gatematrix 
LLC (a subsidiary of Zurich- 
based Swissair Group) pro- 
vides catering and flight ser- 
vices to all Delta flights using 
30 subcontractors located 
throughout the route structure 
of Atlanta-based Delta. 

But because the information 
changes constantly — E-Gate- 
matrix provides 54,000 meals a 
day 
locations — the online system 
has to quickly serve up new 
data on dynamic Web pages 
without compromising down- 
load times. In some cases, 
users might scroll through 10 
to 15 screens of data for a day’s 
worth of flights to find that 
only two items have changed 
on each page. “Try doing that 
with less than a 56K connec- 
tion,” says Robert Eads, CIO 
and executive vice president at 
E-Gatematrix. 


The Web Condensed 


Campbell, Calif.-based Fine- 
Ground’s Condenser software 
uses what the company calls 
delta optimization technology 
to transmit to an end user’s 
browser only the Web-page 
data that has changed since the 
previous view. The browser 
has the rest of the page infor- 
mation in its local cache. But 
the technology doesn’t require 


at 180 domestic catering | 





a browser plug-in or other soft- 
ware on the client. Condenser, 
which runs on Linux or Solaris 
servers, includes techniques 
for optimizing graphics and 
other embedded objects. It 
also accelerates Secure Sock- 
ets Layer (SSL) transactions by 
encrypting and transmitting 


Condenser ... 
applies those 
technologies 
supported by 
the [user’s] 
browser. 


NAT KAUSIK, CEO, 
FINEGROUND NETWORKS 


FineGround 
Networks Inc. 


42 West Campbell Ave. 
Suite 201 

Campbell, Calif. 95008 
(408) 376-0570 


Web: www.fineground.com 











only changed elements. And a 
connection-pooling feature al- 
lows users to manage connec- 
tions to various application 
servers and related data via a 
browser interface. 

“When the user requests a 
page, the Condenser identifies 
the user’s browser type and ap- 
plies those technologies sup- 
ported by the browser,” says 
Nat Kausik, president and CEO 
of FineGround. “A user at a 
desktop PC might realize the 


Niche: Web content-acceleration 
server software optimizes SSL 
traffic and dynamic Web page 
content. 


Company officers: 

© Nat Kausik, president and CEO 
Jay Jawahar, vice president of 
engineering 

Kevin Kirksey, vice president 
of sales 

Zack Urlocker, vice president 
of marketing 


Milestones: 





February 2001: Company and 
Condenser technology 
launched. 

* May 2001: SSL ac- 
celeration added. 

* September 2001: 
Condenser 3.0 
released. 


Burn money: $21.3 

million from New Enterprise 
Associates, Worldview Technology 
Partners and private investors, in- 
cluding $16.5 million in July 2001 


Products/pricing: $50,000 per 
server CPU 


Customers: Multex.com Inc., 
E-Gatematrix, Hilton Hotels Corp., 
People’s Bank Corp., United 


Red flags for IT: 

¢ Faster display of dynamic page 
updates won't help if page-gener- 
ation process is the bottleneck. 

* Technology is complementary to, 
not a replacement for, content 
delivery networks. 


oN hdg Mo 
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benefit of one set of Fine- 
Ground technologies designed 
for a full-blown browser, while 
auser on a Pocket PC will see a 
different set of FineGround in- 
terfaces because of the smaller 
footprint.” 

“The types of content that 
folks are using on their Web 
sites has changed,” says Greg 
Howard, an analyst at The 
HTRC Group LLC in San An- 
dreas, Calif. In a September 
2000 HTRC study. 87% of 100 
Web site decision-makers said 
their companies were using 
dynamic content on their sites. 
Howard says that figure held 
firm in a July 2001 survey of 
100 Web site decision-makers. 

But the percentage of com- 
panies that said they’re adopt- 
ing secure-content technolo- 
gies — which typically gener- 
ate dynamic or personalized 
content — rose from 72% in 
2000 to 76% in 2001, and the 
percentage using personalized 
content from XML-based ap- 
plications jumped from 27% to 
67%. Both content types re- 
quire pages to be refreshed 
regularly. Howard says Fine- 
Ground’s technology can speed 
access to such pages because it 
optimizes based on what’s al- 
ready in the user’s cache. 

“There is a good market for 
them,” he says. “They’ve 

shown it works, and [they] 

are shipping a product.” 

However, the tech- 
nology doesn’t help 

In jy generate content fast- 

er, nor does it optimize 

transmission over the 

Internet. So companies 

may still need a content 

management system or a con- 
tent delivery network service. 

But where dynamic content 
is concerned, E-Gatematrix’s 
Eads says he has no com- 
plaints. “When I’m pulling 
down the shopping cart con- 
taining Delta’s ground manuals 
— 30 to 40 pages — the first 
time, it can take two to three 
minutes,” says Eads. “That’s 
now down to about five sec- 
onds using FineGround.” 

The installation required a 
day of demonstration and test- 
ing, followed by one day of an 
engineer’s time. “We’re seeing 
a 371% improvement in re- 
sponse time,” says Eads. D 


ha 





COMPUTERWORLD January 7, 2002 


ithe buzz 


STATE OF 
THE MARKET 


Fast Caching in 
The Slow Lane 


The current economic slowdown both 
helps and hurts companies like Fine- 
Ground, says Greg Howard, an analyst at 
The HTRC Group. “There's hardly any 
new spending for added infrastructure, 
[but] you have to manage increasing ca- 
pacity demands with what you have, and 
that means using technology that 
caches content in one form or another,” 
says Howard. 

The benefits of personalized and dy- 
namic content aren't available trom tra- 
ditional content-delivery service offer- 
ings like those from Akamai Technolo- 
gies Inc. Companies that offer content 
delivery services typically cache only 
static objects such as logos and icons. 
Cambridge, Mass.-based Akamai uses 
XML as a core element to build pages 
dynamically from its edge servers, but 
this requires users to rewrite content to 
take advantage of Akamai’s XML hooks. 
That leaves Web site administrators who 
need the benefits of dynamic Web page 
caching with offerings from a few small- 
er vendors. 


Pivia Inc. 

Cupertino, Calif. 

www.pivia.com 

Pivia’s Dynamic Application Caching 
service accelerates loading of frequently 
accessed content strings, specifically 
database queries. Pivia focuses on 
caching at the Web server, while Fine- 
Ground focuses on the browser. 


Fireclick Inc. 
Los Altos, Calif. 


www,fireclick.com 


Fireclick offers its Netflame dynamic 
caching as a software product or as a 
hosted service. It uses predictive 
caching and works by forwarding 
cached data to the end user's browser in 
anticipation of the next page request. 
The predictive technology requires an 
8KB Java applet on the client. 


CacheFlow Inc. 
Sunnyvale, Calif. 
www.cacheflow.com 


CacheFlow’s clQ offers reverse-proxy- 
caching server appliances that acceler- 
ate the delivery of static, dynamic and 
streaming media content. 

-Pimm Fox 
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‘The Job Seeker's 
Knockout Punch! 


NAACP DIVERSITY 


“The *1 Diversity Career Fair In The Nation” 
ST 
Meet face-to-face with the area's hottest companies and 


land a job with more money, opportunity & challenge! 


2002 UPCOMING SCHEDULE OF EVENTS 
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WASHINGTON, DC eat i} : DETROIT, MI 
; ; Tues., March 26 
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CALL 1-800-562-7469 FOR MORE INFORMATION ON EXHIBITING OR ATTENDING! 


Or check out www.naacpcareerfair.com to find out more about 
these events and other career opportunities. 


The NAACP Diversity Career Fair is produced and managed by Shomex 
2601 Ocean Park Boulevard, Suite 200 © Santa Monica, CA 90405 © (319) 450-8831 


IT CAREERS 


EI 


Transforming Your Business Using CRM and PRM-Third Annual 


Executive Summit 


summits.frost.com/CRM 


SHAWH BECKER MOHAN MENON 
Senior Director, Vice President, 
e-Business Globe! Customer 
Affymetrix, inc Value 

MasterCard 
JAY BUTTERBRODT 
Director, JAMIE MOORE 
Strategic Projects Global CRM 
Siemens Medical Manager 
Systems.inc 

MARK SAUTER 
MARK FOSTER CRM Business Process 
Vice President Consuttant 
Sales Effectiveness Dow Corning 
AT&T Business Corporation 


BO iia Cis 
Toles Caroll 


EXECUTIVE FORUM: 
January 13-14, 2002 
GENERAL SESSION & 
MAIN EXHIBITION: 
Pum e ey 


EXECUTIVE. WORKSHOP: 


Peters Pap ly) 


Mention CRM Magazine und register at VIP Rates 


Look who’s 
hiring at 
lTcareers.com 


Every day hiring managers 
turn to ITcareers.com for 
the best IT candidates.They know 


us and they know we can deliver. 


if you want a better challenge, we 
challenge you to find a better IT 


career site than ITcareers.com. 


(IT) elena 





ENGINEERING 

Apple is looking for a qualified 
individual for the following 
opening 

Consulting Engineer 

Send your resume to: Apple, 1 
Infinite Loop, MS 84-3CE, Dept 
CW102, Cupertino, CA 95014. 
Or fax to: (408) 974-5691 
Principals only, no phone 
calls please. Opportunities are 
also available in other areas 
Apple Computer has corporate 
commitment to the principle 
of diversity. In that spirit, we 
welcome applications from all 
individuals. EOE. Check out our 
Web page: www.apple.com/jobs 


Talent is the 
fuel of the 


new economy. 


Fill up with 
TT careers. 


IT careers and 

IT careers.com can 
put your message in 
front of 2/3 of all US 
IT professionals. If 
you want to make 
hires, make your 
way into our pages. 
Call Janis Crowley 
at 

1-800-762-2977 


ITCAREERS 
where the best 
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COMPUTER 


Ascential Software has job 
opportunities in the following 
locations: California (Los Gatos 
Oakland); Massachusetts (West- 
boro); and in other areas across 
the United States 


t Software Engineers (Ali Levels} 
* Database Administrator 
* Development/E 
Project Managers 
% Programmer Analysts 
% Systems Analysts 
% Technica! Support Engineers 
% Sales Engineers 


For immediate 
send your u 
requirements to 


Ascential Software 
50 Washing 


Westboro 


Or 
staffing @ asce isoftware.com 
See our website for additional 
penings 
www.ascentialsoftware.com 
EOE 
M/F/D/V. 


No phone calls please 


TO HIRE. 
careers.com 


ay as 
i ee 
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Country Manager - Americas - 
Responsible for all business 
development, sales, cusstomer 
relationship and profitability goals 
for the Americas (“the territory") 
across all target segments. Will 
set goals and targets for multiple 
Business Deveiopment Managers. 
Will define strategies and plans 
and determine the most effective 
organization structure to achieve 
goals of the territory. Will also be 
responsible for employee and 
customer satisfaction and repre: 
sent the company in appropriate 
forums in the territory. Educate 
software practice managers in 
india on needs of U.S. market 
Requirements include a Master 
of Science degree or equivalent 
in Management, Engineering or 
related field and three years of 
experience in the job offered 
or related field of international 
software development business 
management; or a Bachelor's 
degree with five years of pro- 
gressively responsible experience. 
20% domestic and international 
travel required. Applicants must 
have unrestricted authorization 
to work in the United States. 
Salary $130,000/year. 40 hours’ 
wk. Respond with two copies 
of resume to Case #20004170. 
Labor Exchange Office, 19 
Staniford St., 1st Fi., Boston, MA 
02114 


Computers 
THE BOC GROUP 


We are a multi-billion $ Industrial 
Gas Co. with over 40,000 
employees worldwide Our 
location in Murray Hill needs an 
experienced Senior Database 
Administrator. Qualified appli- 
cants will have a BS w/ major in 
Comp Sci, Math or rel disc, 5 yrs 
exp in job offered or 5 yrs exp as 
a sftwr enggr, sys anal, anal 
prgmmr, prgrmmr, or rel occ 
Must have exp w/ ORACLE 
& VAX/VMS, systems imple- 
mentation & maintenance, & 
database mgmnt. Competitive 
salary & excellent compensation 
package. EOE. Please send 
resumes (no calls, please) to 
BOC Gases, 575 Mountain Ave. 
Murray Hill, NJ 07974. PLEASE 
REFERENCE CODE: SDA/DP. 


Systems Administrator, Woburn 
MA; Install, configure, maintain 
and troubleshoot Unix operating 
system, Novell/ Netware, LAN 
(Cisco Routers), WAN and 
Sequent Minis. Perform Fine 
Tuning of ali Servers. Provide 
technical support. Req'd. Masters” 
in Comp. Scie. Or Engg. or Math 
1* yr. exp. in job offered or 1 yr 
exp in Any computer related 
i profession. “Will accept Bache: 
lors degree and five (5) year: 
progressive work experience in 
j lieu of Masters and one (1) year 
j experience. 40 hrs/wk., 9a-6p. 
Mon-Fri, $75,000/Yr. Applicants 
j Should submit two (2) copies 
of his/her resume ir response 
to: Case #20003704, Labor 
Exchange Office, 19 Staniford 
St., 1st Floor, Boston, MA 
02114 


Experienced Computer Systems 
Analyst for Computer consulting 
firm with clients throughout the 
U.S. Duties will include computer 
system design, analysis, pro 
gramming and maintenance in 
all functional areas for corporate 
clients including warehouse, in 
dustrial distribution and logistics. 
automation and financial appli 
cations. Analysis of client's 
operations, design optimization 
plan. Defining programming 
specifications, software testing 
user support and maintenance 
using IBM AS/400. Usage of 
programming languages including 
RPG/400, Synon 1 & 2 and 
Visual Basic. Strong emphasis 
required on Synon skills. Degree 
required. Experience in Devel 
opment and maintenance of 
Synon 2/E product family applied 
to financial and industrial appli 
cations. Please submit resume 
to Ramis, !nc., 1762 Hilton Head 
Bivd., Lady Lake, Florida 32159 


MatrixOne, Inc., a leader in 
product development manage- 
ment software, seeks to fill the 
position of Managing Director of 
Professional Services in their 
Chelmsford, MA office. Position 
requires a degree and manage- 
rial-level work experience, or in 
the alternative, extensive project 
management experience in a 
demanding consulting organiza: 
tion employing a broad sweep of 
technologies including ERP, PDM 
CAD, Viewers and Integrations 
Must be willing to travel 95% of 
the time to customer sites. If 
interested, send resume to: Alison 
Kiefer, HR Representative, Matrix 
One, Inc., Two Executive Drive. 
Chelmsford, MA 01824, via fax 
978-441-0071, or e-mail alison 
kiefer@ matrixone.com 


Hyseq Pharmaceuticals, Inc.- is a 
CA-based public biopharmaceu- 
tical company searching for new 
gene-based products through 
high-throughput sequencing 
technology. We have openings 
for Sybase Database Adminis- 
trators (#3176DD) in our Durham, 
NC location. Requires: Bachelors 
in CS or CE; must have 4 yrs. 
exp. as a Database Administrator 
working with Sybase T-SQL 
Must possess Sybase DBA 
certification and knowledge of 
Unix operating systems, Perl 
and shell scripting. 

Visit Hyseq.com for more info, or 
send resumes to Attn: Michelle 
Mickey, Staffing Manager, Hyseq 
Pharmaceuticals, Inc 670 
Almanor Ave Dept. BIO. 
Sunnyvale, CA 94085. Refer to 
job #, pls. 


Lahey Clinic has the following 
openings in our Burlington, MA 
office 


PeopleSoft Database 
Administrator (Job Code: PDA) 


Database Administrator-SQL 
(Job Code: SQL) 


Candidates must have either a 
minimum of 2 years PeopleSoft 
system administration experience 
or experience in a database 
technical support environment 
including administrative support 
and on-call experience 


Interested candidates should 
send resumes and job code to 
Patrick DeVivo, Human Resources 
Generalist, Lahey Clinic, 41 Mall 
Rd., Burlington, MA 01805. No 
phone calls please 


Financial Systems Analyst 
wanted by staffing firm in 
Melville, NY. Reqd Bach or US 
equiv in MIS + 1 yr comp exp 
incl. Oracle, Hyperion, MS 
Excel/Access. Fax resume to M 
Storelli at (631) 844-7363. 


Call your 
ITcareers Sales 
Representative 

or Janis Crowley 


1-800-762-2977 


IT CAREERS 


internet Design Director needed 
for Miami based Internet Service 
Provider covering Latin America 
to coordinate and develop design 
work and design department 
Min req. Bach. Degree in Design 
plus 2 yrs exp as Web Designer 
Send resumes to Tutopia.com 
Inc. 15050 NW 79th Ct., #200 
Miami Lakes, Florida 33016 Ref 


226. 


aoe 


ADABAS NATURAL 
AIX/UNIX 
PSSP RS 6000 
HACMP CISCO 
WEB - JAVA 
VB C++ ORACLE 
TIVOLI SAN 
NETWORKING ENGINEERING 
SIDEWINDER 


Call Mike Sullivan 
Mutual Computer Consulting, Inc. 
964 3rd Ave. 31st Floor 
New York, NY 10155 
800-310-9744 
E-mail to: mutualc @ attglobal.net 


OPERATIONS ANALYST 
Perform mainframe operations. 
Product manufacturing and 
Internal Service Desk support: 
resolve operational problems on 
releases of OS390, VM, VSE 
operating systems; switch multiple 
tape drive between operating 
systems; perform mainframe 
IPLs and system/data backups: 
recoveries and recommend 
operational improvements. Req. 
4 yrs. exp. in the job offered or 4 
yrs. exp, as an Operations Supv. 
or related. Resumes to ASG, 
1333 Third Ave. Naples, FL 
34102 


Programmer Analysts (multiple 
positions) sought by computer 
s/w consultancy firm in Satellite 
Beach, FL. Must have Bach or 
equiv in Comp Sci, Engg or 
equiv & 1 yr exp. Respond to: HR 
Dept., Infinity Software, Inc., 659 
Loggerhead Island Dr., Satellite 
Beach, FL 32937 


Several computer related 
positions available for a large 
communications, marketing 
and distributing company. 
Degree, technical skills & 
experience vary per position 
Send resume to Ernie Mueller 
CMD Services, Inc., 3060 
Premiere Parkway, Duluth 


GA 30097, 


Sr. Programmer/Analyst sought 
by a commercial bank. Must 
have Associate or equiv. in 
Comp. Sci. or Eng. + 6 yrs. exp. 
in designing, programming 
complex compu systems for 
financial appli. Response to H.R. 
#LT, BTM Info. Services, Inc 
Harborside Financial Ctr - Plaza 


lil, Jersey City, NJ 07311. EOE 


Programmer/Analyst: Plan 
develop programs, evaluate for 
feasibility, cost, time, system 
compatibility; convert project 
specs; enter codes; design dis- 
plays; run, test, debug, correct 
syntax/logic; document, prep 
manuals, installation, training 
routines. Prevailing wage, 9a-6p. 
Req: Associate's in Comp Tech 
or related & 2 yrs exp. Resume 
O. Toubul, A Millennium Moving 
& Storage, 1360-H NW 65 Av, 
Plantation, FL 33313 


Computer Support Specialist - 
implemt, maintain & update net- 
worked com system mg'g outlet 
databases. Develop customized 
reports. Coord comp aided effi- 
cient transactions. Train & instruct 
sys users. 35 hrs. Bach in Comp 
Sci (or for. equiv). 2 yrs exp or 2 
yrs comp instruction exp. Fax 
resume & salary reqmts to (954) 


966-9967, Attn: Mr. Sikder. 


Analytics, a leading provider of 
B2B e-sourcing solutions, has 
an opening for a Senior Devel- 
oper in Parsippany, NJ to ana- 
lyze, design & develop client 
server & 3-tier e-commerce 
applications using technologies 
such as Java, XML, EJB, 
Serviets & databases. MS in 
Comp Sci or Engg with relevant 
work exp reqd. Send resume to 
Andi Hoyt, Analytics, 15 Meigs 
Ave, Madison, CT 06443. 


Programmer Analyst wanted by 
telecommunications/internet 
company. Must have bachelor's 
degree in Computer Science 
and speak, read and write 
Spanish. Send resume to 
A. Kalberg, Terra Networks 
Operations, Inc., 1201 Brickell 
Ave., #700, Miami, Florida 
33131 


A new millenium, a new solution. 


Programmer/Analyst. Analyze, 
design, dev. & implement HR 
systems, Data Modeling & Data 
Migration using C.A. ERWIN 
Knowledge Oracle Financials 
dev. applications using Microsoft 
(DOT) Net. Fax resume 215- 
782-2083 Ref. FD. 


Sr. Programmer Analyst sought 
by S/ware co in Skillman, NJ for 
s/ware developmnt position in 
area of GUI developmnt & 
Distributed application develpmnt 
for financial industry applica- 
tions, incldng. Trade appictns 
Must possess Assoc. deg. in any 
field & 3 yrs exp in s/ware 
develpmnt. Send resume to 
Optimal Solutions, Inc, 3 
Richmond Dr., Skillman, NJ 
08858 


Systems Analyst (Sr.) for NJ 
based co. Must have a Bachelor's 
degree in Comp. Sc., Engg. & 5 
yrs of exp in Comp. S/W dev., 
consulting, testing. Proficiency 
w/VB, VS and in implementing 
mobile applications for Palm 
OS/Win CE, and an ability to 
express complex technical con- 
cepts in business terms. Respond 
to: HR Dept., NuWare Technology 
Corporation, 100 Wood Ave 

Ste. 306, Iselin, NJ 08830. No 
phone calls. (Ref: RG78891M) 


Technical Support Specialist 
8a-2p. 30 hrs/wk. Provide tech 
support for firm's internet web- 
sites; analyze & dsgn projects 
w/ref to hardware/software reqmts; 
review, modify, test prgm & provide 
tech support, updates & links to 
lawyers/relevant websites for 
expanding legal practice. Bach 
of Sci or equiv deg in Comp Sci 
or Engg; Electronics or Electrical 
Engg. Resume to: Udai V. Singh 
PC, 2282 Birdie Lane, Duluth 
GA 30096 


Three openings available for 
a Functional Analyst to design 
develop, and implement software 
projects related to legacy sys 
tems migration to world wide web 
and client-server technologies 
using C/C++ Microsoft Viisuai 
Basic, Oracle, Cold Fusion, 
Honeywell COBOL, Focus 
and UNIX. Frequent travel is 
required. Applicant must pos- 
sess a bachelor degree or its 
equivalence and two years of 
experience. Competitive Salary. 
Send resume to PS! International 
inc., 10306 Eaton Place. Suite 
400, Fairfax, VA 22030. 


Call Janis Crowley at 1-800-762-2 
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Thomson Financial currently has 
a position available for Team 
Manager at our Boston, Massa- 
chusetts office. Please send 
resumes to: Thomson Financial, 
Attn, HR, 22 Thomson Place 
Boston, MA 02210. Fax: 617- 
856-5601. We are an equal 


opportunity employer 


SYSTEMS ENGINEER (DSP) 
wanted by NJ Co. involved in 
Dvipmt & Mktg of specialized 
S/ware. Must have Bach in 
Comp Sci, Elec Engg or related 
field & 2 yrs DSP algorithm 
dvipmt experience. Respond 
by resume to: HR Dept., C&P 
Technologies, Inc., 294 Harrington 
Ave., Closter, NJ 07624 


Software Engineer 
Baytree Associates seeks a 
Software Engineer to provide 
software engineering and 
consulting services in project 
design, development, testing 
and implementation of server 
based computer applications 
using ORACLE applications and 
tools. SQL*Loader, SQL*Plus, 
Forms or PL/SQL. Bachelor's 
Degree in Engineering, Math 
Science or related field plus 2 
yrs. Exp. req'd. Fax resumes to 
ATTN: HR Mgr. 704-424-5642 


Programmer. Designs, develops 
ebusiness & other applications 
using Siebel VB Script, Siebel 
Remoie, Siebel Anywhere 
Sybase, MSSQL Server. 2 yrs’ 
exp. Systems Analyst, Siebel 
cert. Fax resume 215-782-2083 
Ref. AH. 


Programmer/Analyst wanted by 
Youngtech Inc. in Edison, NJ 
Must have Master's deg in comp 
sci or related fields w/strong 
knowl of prgmg in K shell script 
& Pro C, writing stored proce- 
dures, functions & triggers using 
C, C++, PUSQL, Oracle & other 
database systms under Unix 
envrmnt. Candidate must also 
have background w/Oracle 
RDBMS & to be able to maintain 
debug & impimt client/server, 
object-oriented s/ware code for 
systm components using HTML 
JSP, Java & JDBC. Please send 
resume to HR Dept, Youngtech 
Inc., 2147 Rt 27, 1st Floor, 
Edison, NJ 08817. Fax #: 732- 
650-9668. 
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Software Engineer: Researches, 
develops/tests/documents soft- 
ware; evaluates performance 


maintenance requirements 


develops specialized applications 
using AS/400, ASP, Visual Basic 
Active Reports and SQL Server. 
Req. Master's in Comp. Science. 
Statistics, Engineering, related 

equivalent & 2 yrs. exp. Resume 
to Debra Ramirez at GDKN 
Corp., 300 Pine Island Road 
Suite 3033, Ft. Lauderdale 

3324 


Quality Assurance Team 
Leader- Req. B.S. Computer 
Science, Engineering or related 
field and exp in Manual Testing 
in the Internet Environment 
Senior Configuration Specialist 
Req. B.S. Computer Science 
Engineering or related field and 
exp in developing maps using 
Mercator and EDi programming 
Sr. Technical Manager- Req 
B.S. Engineering and exp in 
heavy supply chain management 
execution, signma consulting 
and use of Mercator and sterling: 
Sr. Software Engineer- Req. B.S 
and exp in coding complex 
algorithms and object oriented 
design. Apply to: Eventra, Inc 
Attn: HR Dept, 440 Wheelers 
Farms Rd, Milford, CT 06460 


# Kama Consulting Inc. 


TOP $$'s, W2 or 1099 
We are a fast growing 
Consulting company based 
in New Jersey. 
Excellent opportunities for 
Programmers 
Systems Analysts, DBAs. 
Sun Solaris System Admins, 
Natural, Powerbuilder, 
ADABAS, ORACLE, SYBASE, 
PROGRESS, COBOL 
TCPAP, Deiphi/VB, Windows NT 
Send your resume to 
Rod McFadden 
Kama Consulting 
Fax:201-934-7166 
Email:Kamaco @ aol.com 


Software Consultant - Analyze 
the existing system, re-engineer 
using Oracle, Oracle Forms. 
Oracle Case, Oracle Reports 
and Oracle HRMS. Regs: Master's 
in Computer Science, Computer 
Applications, Mathematics, Elec 
trical/Electronic Engineering or 
its foreign ed equiv and 2 yrs exp 
in the job offered. $66,700/yr 
40 hrs/wk, 9a-6p. M-F. Send 2 
resumes to North Metro, Job 
Order #GA70410411, 2943 N 
Druid Hills Rd., Atlanta, GA 30329 
or the nearest Department of 
Labor Field Service Office. An 
employer paid ad. Must have 
proof of legal authority to work in 
the US 


Sys. Engg. wanted by NJ based 
for locs. throughout US. Must 
have Master's degree in Comp 
Sc., Engg. & 1 yr. exp. in Comp. 
S/W developing and/or consult 
ing. Proficiency w/VB, VS and in 
implementing mobile applications 
for Palm OS/Win CE, and an 
ability to express complex tech 
nical concepts in business 
terms. Respond to: HR Dept 

NuWare Technology Corp., 100 
Wood Ave., Ste. 306, Iselin, NJ 
08830. No phone calls. (Ref 
GG7888!IM) 


COMPUTER SUPPORT SPE 
CIALIST needed by a Computer 
Service & Integrator company in 
Lincolnwood, IL. Must have an 
Associate Degree with 1 year 
exp. in computer technical 
pport with Mi 
Professional Certificate. Respond 
ompuelectronics, 6512 

oln Ave., Lincolnwood 


oft Certified 


Product Marketing Engineers 
needed by Austin, TX cc 
involved in design & mftr of 
s/ware & h/ware to aid in selling 
software/hardware and to provide 
technical services using knowi of 
engg by dvipg mktg materials 
and working with R&D engg 
Requires Bach. in Engg. Comp 
Sci., Physics or Math. Fax re 
sumes to Raja Faris, National 
Instruments Corp. at 512-683- 


6924. Put code PME on resume. 


Software Engineer: (St. Louis 
MO): Design/develop/configure: 
implement advanced Internet 
software applications and perform 
server/network adm. utilizing 
C/C++, CoidFussion, VB, SQL 
and Oracle on UNIX/Windows 
platforms. Require M.S. in Comp. 
Sci., EE or Math. Plus 1 yr. exp. 
(or BS plus Syr. exp.) Competitive 
salary; 40hr/wk Mon.-Fr 
8:00am-5:00pm. Resume to 
Jessica Zhao, HR, Hyson Int 
Corp. 210 N. Tucker, Suite70 
St. Louis, MO 3101 
cal/EOE 


Systern Analyst to analyze 
projects for market Risk Mgmt 
Develop systems to capture and 
isform trading pc ons and 
market financial data 
equival Min 2 yr exp. in 
Finance/Computer Science. CV 
Market Risk Mgmt. 127 Public 
Square-0501. Cleveland, OH 


44114 No Calis. EOE 


rm requires network 
administrator to maintain and 
secure computer net 
work, data transmission software 
and hardware infrastructure for 
40 users. System includes Ex- 
change Server, SQL Server, 
Client/Server applications, VPN 
routers, firewalls. Responsibilities 
include maintaining and devel- 
oping secure database connec 
tivity with outside data providers: 
securing network access points: 
pi ding support to users; test- 
ing; selection, recommendation 
and purchase of new hardware: 
software. Requires 2 years 
experience in the job duties. 
Submit resume to: Human 
Resources, VEZ Systems, P.O 
Box 525, Cresskill, NJ 07626 
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NETWORK ADMINISTRATOR 
needed by « ngineering 
Consulting Firm in C 

Must have an Associate Deg 
with 2 yrs. exp 

networking 

Certified Professional Certificate 
Respond to Pres., Gandh 
Associates. nc 

Northwest Highway 


Chicago, iL 60631. Nc 


NETWORK TECHNICIAN wanted 
by a Computer Service & Inte 
grator in Lincolnwood, !L. Mus! 
have an Associate Degree 

6 months exp. in computer tech 
nical assistance with h 
Certified Professional Certificate 
Respond to: President, C 
electronics, 6512 North L 

Ave., Lincolnwood, IL 60 


Systerns Analyst with regional 
global systems design, mig 

& implementation experienc 
senior position with 
Requires travel for 
assignments. Send resum 


Jennifer Bakken, 5001 Rockside 


or on-line at 
jennifer.j.bakken@s¢ 


EOE 


Reps needed t 
jesign & 
lex numer 
algorithms; ensu 


analysis 


analysis 


in Electr 
Raja Faris. 


Corp 


Programmer/Analyst wai 

EFS Services, Inc. ir 

Must have degree ir 

or Math and expe 

JSP, JRun 

Plus. Please send r 

Bryan Miller, EFS Serv 

8425 Woodfield Cross: 
Indianap 


) calls please 


Solid results, record speed - IDG Recruitment Solutions. 


Call Janis Crowley at 1-800-7 


sIDG 
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Software Engineer sought by 
software consulting company in 
Sugarland, TX to work in Denver. 
CO. Engage in full life-cycle 
oftware development in an IBM 
ainframe environment. The 
ftware applications run on 
an MVS operating system and 
nterface with a DB2 database 
Analyze requirements. Create 
igns and design documenta: 
tion. Code, test, implement, and 
de-bug the software applications 
Use COBOL and REXX pro 
yramming languages, thi 
zraphicai user interface tool 
Controi language, the Xped 
Je-bugging tool, and the Endevor 
softwa figuration manage 
ment i the design and 
development process. Engage ir 
pri nent as required 
achelor's degree or 
foreign equivalent in Computer 
ence, Engineering or a related 
field including Production Engi 
neering;1 yr exp. in full life-cycle 
software development in an IBM 
mainframe environment: working 
knowledge of DB2 databases. 
X programming language 
and the ENDEVOR tool. $66, 100 
yr. M-F; 8am-5pm. (5 openings) 
Respond by resume to James 
Shimada, Colorado Department 
of Labor & Employment, Empioy- 
ment & Training Division, Tower 
ll, #400, 1515 Arapahoe, Denver 
CO 80202 & refer to Job Order 
Number CO5009885. 


oftware Engineer-Scientific 
Design, & develop sw for mtis 
char & Xstlog. Create GUI & sc 
ode to conduct computations 
req. for XRD. Create Xstlog tools 
& perform cust support. Require 
Ph equiv. in Chem., Phys or 
Hands-on exper with 
nnti/c jools of XRD 


incl single xst!, quasi-periodic & 


polyxstin mtis. Proficient VB. 
a, C, Cr+. I 

k/ed combined; exprnc ir 

nm dev., graphics & web 

gramming & applets (exprnc 

be proven by programs 

submitted); demonstrate ability 

nad 2arch through 

in referred sci journals 

$80K. Respond: PO 

ermore CA 94550 

view & Loc: Livermore,CA 


net and Intranet 
ations, databases, web 
nN multiple environments. 
platforms and assist with devel 
pment, implemeniation o 
Script 
web application fur 
plications and Java applets 
based services, test development 
and creation of documentation 
Bachelor's degree in Computer 
Science required. Send resume 
to K.P. of HR Department 
Hyundai Motor America at 1 
Tal Fountain Valley, CA 


ftware Engineer — Cupertino. 
Develop USB 2.0 device 
ontrolier evaluation environment 
with firmware, micro-controiler, 
ws WDM device 
dows MFC app 
Responsible for software speci- 
host/device side testing 
environment of the OTG care. 
Must have Bachelor's degree in 
computer science, physics or 
mech engineering & 5 yrs exp 
in job or Master's degree in com- 
puter science, physics or mech 
engineering. Pls fax resume tc 
408-342-8699 


Corliant, Inc. provides IT strategy 
consulting, systems integration 
and software development tc 
clients nationwide. We have 
mmediate, full-time opportuni 
ties for bc level and 
experienced professional in any 
of the foliowing 


NETWORKING 

® Network Engineers & 
Consultants 

® System neers 
MCSE 

> LAN/WAN Specialist 
CISCO 


APPLICATION 

DEVELOPMENT 

® Microsoft Certified Solutior 
Developer 
Visual Basic, Visua 
Database Administrators 
(Oracle, SQL Server 
Web Based Development 
Java or JavaScript, CORBA 
Mic: ft ASP. ActiveX 
COM/DCOM 


Job opportunities are also ava 
able for Sale Managers. 
Marketing Managers, Busin 
Managers, Human Resources 
Managers, Controllers and 
Technicai Recruiters. Bachelor's 
or Master's degree required 
depending on position. We als« 
accept the foreign education 
equivalent of the degree or the 
degree equivalent in educatior 
and experience Excellent ber 
efits. Send confidential resume 
and salary requirements t 
Corliant, Inc, 8 Neshar 
Interplex, Suite 209, Trevose 
53. An equal opportunity 


Vertex Inter 
opening in 
Minnesota 
Engineer 


Develop and support 

matic int 

Company's order fulf 

product (Conquest) and other 
SCE, WMS, OMS and ERP busi 
ness partner applications using 
VB, VBScript, JavaScrip 
ActiveX, COM+, MTS an 


environment 


At least a bachelor's or its equiv 
alent in Computer S 
Engineering of a reiate 

and several years re 
experience, including expenence 
with VB, VBScript, ASP, ActiveX 
COM+, MTS and SQL 7 


Resume and/or cover 
reflect eac 


Forward 

Maron 0 
Resources, Vertex 
Inc., 22 Audrey Place. 
NJ 07004 


Programmer 


Vertex 

anc 

Minnesota 

mer |. Work 

other Programme: 
proprieta 

which tracks shiprr 
entry information 


proposes sc 
to new applications 
ver environ 
net server e' 
test the necessary 

interfaces for customers. At least 

bachelor's or its equivalent in 
Computer Science, Engineering 

a related fieid and relevant 
experience, including SQL Serve 
7.0, Visual Basic, WinRunne 
and Windows 2000/95/NT 
Resume and/or cover letter must 
reflect each requirement above 
and spe: 
or it will be rejected 
resume to Debra Maron, Direc 
Human Resources, Vertex Inter 
active, Inc., 22 Audrey Place 
Fairfield, NJ 07004 
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needed by a mir 
jasoline sales 
quartered in Hayward 
have Bach. D 
yrs exp in 
network admir 
Dist 


in: Naresh Goyal, President. 


ASP, SC 

Script, Java 

Access & 

mplement, maintain & doc 
systems. Req: Master's Degree 
im Computer Science/Information 
Systems. 4( Job/interview 


Virtuale 


BASIS, ABAP. ALE/E 


NETWORKING 


ietwork Engineers & 


APPLICATION 
DEVELOPMENT 
+ > 


Visual Basic, Visual 
abase Administrat 


Oracle, SQL Server 


Managers 


Business 


available fo 
Marketing Mana 
Managers, Hur 
Managers. 
Technical Rec 

r Master's 
depending on po 


cept the 


equivaier 
xperience. Exce 


Neshaminy 


Trevose, PA 19¢ 


SOFT 
sponsible for 

and external interface develor 
ment. Use combination of Oracle 
PL-SQL. CASE tools and Pec 
pleSoft under Oracle 8.x em 
ment to dev D 

and mi Cat 

ware and/o modt 

DoD HAMS application 
72K(F-T. 40hr/wk) 

Orleans, LA ¢ 

Science (or 

experience or related experience 
in ERP package customizatio 


Contact: Kenneth Burkhalte: 





Oracle Database Administrator 
40 hr/wk from 8am to 5 pm 
$94.5K/yr. plus benefits. Min 
Reg.: (a) M.S. in Computer 
Science plus (b) 3 yrs. exp. as 
Program Analyst. (c) in lieu 
f M.S. in Computer Science 
employer will accept B.S. in 
Computer Science plus 5 yrs 
of progressive work exp. in Data 
base Administration or Data 
Modeling. The Oracle Database 
Administrator designs, develops. 
5 Ss, produces, and 
intains databases applying 
knowledge of database man 
nt systems and design 
is, software development 
dologies, and platform 
g systems. These data: 
bases are supplied for our clients 
in support of the campaign man 
agement and decision support 
warehouse software tools. Such 
databases reside on our distrib 
uted platform, which is currently 
Unix based, running an Oracle 
8.0.6. data engine. The Oracle 
Database Administrator analyzes 
usiness requirements and 
creates project management 
documentation as appropriate 
cipates actively in the 
alysis, design and construc 
phases. Plays the major role 
n the logical and physical mod: 
eling of the database and is 
resp bie for its physical 
development. Writes procedures 
and scripts that pertain to the 
abase engine to perform var 
us tasks. Maintains and 
enhances all the Oracle database 
omponents as they relate to 
security issues, customer support 
and Campaign Management 
too! and decision support tool 
Applicants must show proof of 
legal authority to work in the U.S. 
Send resumes to lilinois Depart 
rT of Employment Security 
South State Street - 7 North 
go, Illinois 60605. Att 
d Boksa. Refer # V-IL 
B An employer paid ad 
Send 2 copies of bott 

ind cover letter 


T firm in Detroit, Mi seeks to f 
the following positions 


SAP CONSULTANTS: Develop: 
ment & impiem. of functional 
modules such as Fi/CO, MM 
SD, PP, ABAP Programming 


PROG ANALYSTS: Participate 
n all phases of s/wr development 
using Oracle 7/8, PL/SQL 
PRO’ and/or Java Tools. 
and/or Mainframe skills -- CICS. 


DB2, COBOL, CSP, JCL, VSAM 


IGN ENGIN 
1. Exper in desig! 
rugratior 
Metaphase/Windchill/E 
round of Oracle Ri 


w/strong backgrou 


2AM /CAE 


UIREMENTS: Must have 
Bachelors or Masters or equiv in 
areas such as CS, Mechanica 
r Electrical Engg, Buss Adr 
Finance or related field; & 1-5 yrs 

exp in the req'd area 


Positions available in Detroit, M 
and at client sites throughout 
US. Pis mail ume to HR 
32255 Northwestern Highway 
#248 Farmington Hills, Ml 48334 


SENIOR SOFTWARE ENGI 

2 to de in, develop, test 
mplement, maintain and support 
application software, focusing or 
logistic operations, billing and 
revenue, and account receivable 
modules, using COBOL, DB2 
SQL, CICS, SDF, PacBase, QMF, 
Java, Access and WebSphere 
on MVS/ESA, Windows and 
UNIX operating systems. Require: 
M.S. degree (or completion of all 
course requirements) in Computer 
Science, an Engineering disci 
pline, or a closely related field 
with one year of experience in the 
job offered or as a Programmer 
Analyst. Competitve salary of 
fered. Apply by resume to: Cheryl 
Herndon, HR Coordinator, Allied 
Automotive Group, 160 Clairemont 
Avenue, Decatur, GA 30030 
Attn: Job KS. 


COMPUTER/IT 

RICE / LM Technical Developer 
(multiple openings). (Troy, Michi- 
gan). Requires a Bachelor's 
degree or equivalent foreign 
education in computer science. 
management information systems, 
or an engineering field, and 2 
years’ experience in the job of 
fered or 2 years’ experience in 
Delphi socket programming and 
COM/DCOM programming. All 
stated experience must include 
performance tuning of Stored 
Procedures and Triggers in an 
MS or Sybase SQL technologies 
environment. One year of stated 
experience must include inte- 
grating Deiphi applications with 
SAP R/3. in lieu of a Bachelor's 
degree, will accept 3 years of 
university-level credit emphasiz- 
ing one of the stated fields and 2 
additional years of stated expe- 
rience. Develop and support 
Labe! Management application 
utilizing Delphi socket program: 
ming and COM/DCOM program- 
ming. Engage in performance 
tuning of Stored Procedures and 
Triggers in an MS SQL tech- 
nologies environment. Engage in 
applications development and 
support of Label Management 
application and in integrating 
Delphi applications with SAP 
R/3. 40 hrs./wk. 8:00-5:00. 
Apply with resume to Jennifer 
McKenzie, 1450 W. Long Lake 
Road, Troy, Michigan 48098. 


Carnegie Software Solutions is 
looking for a Custorner Technical 
Services Manager. Job duties 
include directing and coordinat 
ing activities of departments in a 
technologica establishment 
concerned with providing 
customers technical services 
such as telecommunication 
provisioning or network architec- 
ture/management in conjunction 
with sales and marketing activities 
Coordinating technical liaison 
services between management 
and customers with newly devel- 
oped techniques or practices in 
processing company products 
and to inform customers of new 
types, specifications, and end- 
uses of software or services 
Analyzing clients operating 
procedures to determine user 
requirements, procedures and 
problems in order to devise the 
most efficient method of accom- 
plishing the goal of improving the 
existing computer system. Qual- 
ified candidates must possess 
a master's degree in Business 
Administration and 3 years of 
experience as a Customer Tech 
nical Services Manager, Software 
Engineer or a General Manager. 
Three years of experience must 
include 1. Network architecture 
and management, Telecommu 
nications provisioning. and 2 

Iding marketing plans and 
developing sales programs 
Please send resumes to 
Carnegie Software Solutions 
5204 N. Tennyson Parkway 
Piano, TX 75024 Ref # 7580.002 


ATTN: President 


SOFTWARE ENGINEER to 
design, develop, implement and 
maintain web-based and distrib: 
u' middieware application 
software for the telecommunica 
tion industry using client/server 
technology, distributed technology, 
c oriented programming 

niques Java Applets. 
Serviets, JDBC, Java Script 
RMI, SQL Server, PL/SQL, HTML. 
Jbuilder, Oracle and ROBMS 
under Windows NT, SUN Solaris 
and UNIX operating systems 
Require: M.S. degree in Computer 
Science, an Engineering disci. 
pline, or a closely related field 
with two years of experience in the 
job offered or as a Programmer, 
Analyst. Extensive travel on 
assignment to various client 
sites within the U.S. is required. 
Competitive salary offered. Apply 
by resume to: Sam Murthy 
Bharath, CEO, ERP World, LLC. 
6580 Jimmy Carter Blvd 
Norcross, GA 30071; Attn 
Job UN 


IT CAREERS 


ENGINEERING 

Software Engineer (Atlanta, GA) 
Requires a Bachelor's degree in 
Computer Science, Computer 
Engineering, or a related field 
and two years’ experience in 
the job offered or two years’ ex- 
perience in software design and 
development. Experience must 
involve two years of Microsoft 
C++ programming, one year of 
systems-level programming, and 
one year of TCP/IP programming 
Experience may be gained 
concurrently. Perform software 
design and development activities 
in connection with Internet 
Scanner product, utilizing Mi- 
crosoft C++ and TCP/IP pro 
gramming. Develop prototypes | 
and deliverable product code 
through systems-ievel program 
ming. Provide technical docu- | 
mentation on existing and devel 
oped modules of the product 
Resolve product problems relating 
to the software as reported by 
the customers to technical support 
40 hrs./wk. 8:30-5:30. Salary 
range: $67,050-$75,000/yr., dep 
on qualifications. Apply with re 
sume to: Angene Esson, internet 
Security Systems, 6303 Barfield 
Road, Atlanta, GA 30328. EOE 


CHIEF COMPUTER PROGRAM- 
MER - Must have BS in Electrics 
Engineering or related. Must 
have 2 yrs in job offered or 2 
yrs in related occupation as 
Information Technology. Software 
nalysis. Assist in the design 
and implementation of technica! 
architecture using Unified Mod- 
eling Language (UML). Identify 
and recommend the design 
patterns like Model View controller 
and create the detailed design 
function specification, program- 
ming specifications, test plans 
etc. Estimate the development 
effort and to create proposals. 
statement of work using Use 
Cases and Use Case diagram 
identify, implement and adhere 
to the development standards 
conforming to J2EE specifications. 
Recommend, integrate Dev 
ment of Production en 
like IBM Websphere, Visualage 
for Java, DB2, Http Server 
Secureway etc. Integrate software 
configuration management tools 
ike Rational Clearcase and 
Defect tracking tools like Rational 
learquest. Participate in a 
reduced role on programming 
tasks, focusing on the design 
and programming effort on 
complex modules, sub-systems 
involving Java Server Pages 
Seviet, EJB, Stored Procedures. 
HTML, JavaScript etc. Adhere 
development methodologies like 
Rational Unified Process (RUP) 
using tools like Rational Rose for 
various UML diagrams. Must 
have exp. and/or education that 
includes E-Commerce Architec: 
ture, Design and Development 
according to J2EE Specs using 
WERsphere, Visual age, EJB 
JSP Serviet Programming. Etc 
40 hour per week, 8:00 am tc 
5:00 pm. Qualified applicants 
send resume to Angela C 
Habegger, Human Resource 
Manager at Meritage Technolo 
gies, Inc., 7720 Rivers Edge 
Drive, Suite 245, Columbus 
Ohio, 4323 


anne 


PROGRAMMER/ANALYST to 
analyze, design, develop and 
test web-based application soft 

ware for the telecommunication 
ndustry using object oriented 
yrogramming techniques, Java 

j2EE, EJB, C++, XML, UML 

HTML, JavaScript, Oracle and 
Rational Rose under HP-UX and 
Windows NT/2000 operating 
systems. Require: Bachelor's 
degree in Computer Science. 

Engineering, or a closely related 
field with two years of experience 
in the job offered. Extensive travel 
on assignment to various client 
sites within the U.S. is required 
Competitive salary offered. Apply 
by resume to: Eduardo Santos 
President, Custom Software 
Solutions, inc., 1002 Williamson 
Lane, Snellville, GA 30078; Attn 
Job AK 


Software Developer 

ADP Integrated Medical Solutions 
is looking for a Software Devel- 
oper in our Lake Mary, Florida 
location. Responsibilities include 
the ability to design, develop, test 
and maintain application software 
the latter being involved with 
program and data management 
A Bachelor's degree in CS/MIS. 
CIS/MNGT/Science and minimum 
of two years’ experience in the 
above job, or two years of expe- 
rience as Programmer/Analyst 
Network Consultant is required. 
This is a full time position, 40 
hours per week, from 9:00 a.m 
to 5:30 p.m. Please apply on 
online at www.adpims.com, be 
sure to include your resume 
cover letter and job code 
CIMSSDLF02. EOE 


COMPUTER/IT 

Application Manager, S&D. Re- 
quires Bachelor's or foreign 
equivalent in Computer Science 
or in Business Administration 
with coursework in computer 
science and 4 years’ experience 
in the job offered or 4 years 
experience engaging in technical 
and functional configuration of 
SAP in sales and distribution 
("S&D") module. Stated experi- 
ence must include 2 years of 
experience in the following 
determining cross-functional 
impact of S&D configuration and 
functional changes within a 
shipment and distribution envi- 
ronment; and leading production 
support. 40 hours per week 
8:00 a.m. — 5:00 p.m. Apply with 
resume to Ms. Carmen Grogan 
Manager, H.R., The Scotts 
Company, 14111 Scottslawn 
Road, Marysville, OH 43041 


QA Manager 
Houghton Mifflin Company is 
seeking a Manager, Information 
Technology Quality Assurance 
for our Boston, Massachusetts 
office, who will be responsible for 
providing quality assurance for 
Houghton Mifflin Company IT 
systems. The incumbent will re- 
search, design, and develop 
a quality assurance process to 
support Houghton Mifflin Com 
pany information and technolo 
gies Send resumes to: Nicole 
Sherman, Houghton Mifflin 
Company, 222 Berkeley Street 
Boston, MA 02116; Fax: (617) 
351-1106 or email: Nicole_Sher- 
man @hmco.com. Houghton Mif- 
flin Company has a strong and 
proud commitment to diversity 


Computer Positions: Programmer 
Analyst, System Analyst, Software 
Analyst, Network Analyst 
Systems Engineers, Network 
Engineers, Database Analysts 
IT Marketing Specialist, and other 
technical professional. Multiple 
openings. Nationwide Client 
sites. We need professionals 

at least a bachelor's degree 
in computer science, engineering 
mathematics, statistics, related 
technical fields, or any business 
and 1+ year of relevant experience 
Fax resumes to 212-224-5082 


att: Dept C 


Strategic Staffing Solutions, a 

»wing s/w consulting comp. 
has openings for IT/Prof. & 
Consultants. Duties include 
designing and developing s/w 
systems using various software 
packages & languages and 
various hardware platforms. 
Degree reqid or equiv. + exp 
Frequent relocation may be 
required based on company 
needs. Please email your 
resumes to sssresumebox@ 


aol.com 
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Senior Programmer Analysts 
Design, analyze, and develop 
software using Cobol, PL/1 
CICS, JCL, IMS, VSAM, and 
DB2 in an IBM MVS mainframe 
environment. Must have a B.S. 
in Computer Sci (or equivalent) 
with at least five years of 
progressive experience. Must 
have legal authority to work 
in the US. Send resume along 
with proof of work status 
to: HR, Premier Softech Inc., 203 
Yarrow Circle, Dayton, NJ 
08810 or email to 

jobs @ premiersoftech.com 


Web Master: For retail software 
co, develop, program, implement 
& document Websites. Req’s: BS 
degree or equiv in Comp Science, 
Eng or related field. 1 yr exp in 
job offered or 1 yr exp as a 
Software Developer. Exp must 
include development, program- 
ming, implementation, docu- 
mentation & testing of software 
programs. Prof. in Visual Basic. 
VB Script, JavaScript, Oracle. 
Developer 2000, ASP, HTML 
DHTML and PL/SQL. Send 
resume to Mr. Gutha, 2048 
Hollis Rd., Landsdale, PA 
19446 


SOFTWARE ENGINEER to 
design, develop, test, implement 
maintain and support application 
software using PacBase. 
COBOL, CICS, DB2, QMF, SDF. 
JCL, TSO/ISPF, Expeditor, Spufi 
File-Aid, Access and Foxpro 
under MVS/ESA, Windows and 
UNIX operating systems. Require: 
B.S. degree in Computer Science. 
an Engineering discipline, or a 
closely related field with five 
years of progressively responsible 
experience in the job offered or 
as a Programmer/Analyst. Com 
petitive salary offered. Apply by 
resume to. Cheryl Herndon, HR 
Coordinator, Allied Automotive 
Group, 160 Clairemont Avenue 
Decatur, GA 30030; Attn: Job MV. 


Computer Positions: Programmer 
Analyst, System Analyst, Software 
Analyst, Network Analyst 
Systems Engineers, Network 
Engineers, Database Analysts 
IT Marketing Specialist, and other 
technical professional. Multiple 
openings. Nationwide Client 
sites. We need professionals 
with at least a bachelor’s degree 
in computer science, engineering, 
mathematics, statistics, related 
technical fields, or any business 
and 1+ year of relevant experience. 
Fax resumes to 212-224-5082 
att: Dept MIL 


Technical Specialist/Quality 
Assurance Manager. Coordinate 
internal implementation of soft- 
ware- Capabilities Maturity Mod- 
el (CMM) by managing develop- 
ment processes & procedures for 
systems integration consulting 
Tools: C/C++; Java; Visual Basic; 
UNIX. Master's in Comp. Sci 

Math or Electrical Eng* + 1 yr 
exp. in job offered or as Sr. Qual- 
ity Engineer req'd. (“Master's 
degree in any engineering field + 
6 months exp in software quality 
assurance also acceptable.) Pre- 
vious exp must include: Software 
quality assurance using C/C++ 
Visual Basic; UNIX. 40hrs/wk 
9am-5pm, $70,000/yr. Applicants 
must show proof of legal author: 
ity to work in the U.S. Send 2 
copies of resume & cover letter 
to lilinois Dept. of Employment 
Security, 401 S. State St.-7 
North, Chicago, IL 60605. Attn 
Leila Jackson. Ref# V-IL 27238- 
J. Employer Paid Ad. No calls. 


e-Emphasys Technologies. 
headquartered in Cary, NC, is 
presently seeking: Program 
Managers to manage multiple 
Baan ERP and Baan Openworid 
projects to ensure that imple- 
mentation and prescribed activities 
are carried out in accordance 
with specified objectives. Plan 
and develop methods of imple- 
mentation of computer programs. 
Perform computer system 
integrations. Qualified Candidates 
will possess, MS/BS or equivalent 
and relevant work experience 
Fwd resume to: e-Emphasys 
Technologies HR, 1026 Grande 
Heights Dr., Cary, NC 27513. 


Business Applications Developer 


The Massachusetts Medical 
Society, a professional member- 
ship organization for physicians 
seeks an experienced Business 
Applications Developer proficient 
with the Microsoft platform, SQL 
Server, Vinterdev, and VB to 
analyze, design, code, implement, 
test and maintain client-server 
and Web applications and 
systems. Applicants must satisfy 
appropriate education and 
experience requirements. Send 
a resume to Human Resources, 
Massachusetts Medical Society, 
860 Winter Street, Waltham, MA 
02451-1411 
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UCITA 


pal Financial Group in Des | 
Moines, Iowa, which is a mem- 
ber of a broad coalition of busi- 
nesses and groups opposing 
the measure. 

The Uniform Computer In- 
formation Transactions Act 
has been under attack by li- 
brary and consumer groups 
and by companies, including 
giants such as The Boeing Co. 
in Chicago and Caterpillar Inc. 
in Peoria, Ill, all of which 
maintain that the law gives too 
much power to vendors. 

Opponents blocked UCITA 
in every state where it was in- 
troduced last year. Facing the 
possibility that UCITA could 
die, its drafting committee met 


ries of amendments intended 
to win support. In particular, 
the committee reversed course 
on the so-called self-help pro- 
vision, which would have al- 
lowed vendors to remotely 
turn off systems in a contract 
dispute without court inter- 
vention. Vendors would now 
have to go to court when such 
disputes arise. 

“I do know that some of the 
changes that are being pro- 


the concerns of some,” said 
Carlyle Ring Jr., chairman of 
the UCITA drafting committee 
of the National Conference of 
Commissioners on Uniform 
State Laws, a Chicago-based 


commercial law adoption in 
the U.S. “Others are not going 
to be as satisfied,” he said. 





last month and adopted a se- 


Surveys: IT Jobs Found via 


work for licensing contracts 


Networking, not Internet 


Job sites especially 


BY LEE COPELAND 


As the economic slump spills | 


into 2002, out-of-work IT pro- 
fessionals may have a difficult 
time finding work if they limit 
their searches to job Web sites. 

According to Drake Beam 
Morin, a New York-based out- 
placement consulting firm, 
only 6% of company managers 
found jobs on Internet sites, 
compared with 61% who found 
work through networking. 

A separate study by Ca- 
reerXroads, a Kendall Park, 
NJ.-based consulting firm, un- 
covered similar results. Ca- 
reerXroads surveyed nine pub- 
lic companies, which hired a 
combined total of 63,000 em- 
ployees last year. Of that total, 
8% found their jobs through 


Mass., and other m 


we for the 
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ster.com, while 16% found jobs 


sites of the firms that eventual- 


through employee referrals. 


president of core innovations 


importance of networking for 


IT industry, where project- and 
personnel-management | skills 
often set candidates apart from 
those with only technical skills. 


as a friendly,” said Tom 


dent of core innovations at 


human nature more attracted 
| to people that we know and 
| trust than people we don't.” D 
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posed will result in satisfying | 


organization that spearheads | 


UCITA provides a frame- | 


Making Change 


self-help. 


The drafters of the Uniform Computer Information Transactions 
Act (UCITA) have made a number of changes to the controver- 
sial software licensing law. The proposed changes: 

® Prohibit so-called electronic self-help, or remote access, which 


is adamantly opposed by end users. Some opponents, how- 
ever, question whether the change really closes the door on 





that lack certain specific provi- 
sions. Opponents say UCITA’s 
default provisions grant sever- 
al questionable rights to soft- 
ware publishers. 

“It looks like they tried to ad- 
dress a lot of different things. 
Whether they did them right is 
another story,” said Dave Wei- 





through the corporate Web | 
ly hired them. But 19,500 work- | 
ers, or roughly one-third of the | 
new hires, found their jobs | 


Tom Schlinkert, senior vice 


at Drake Beam Morin, said the | 
survey results underscore the | 


job seekers, particularly in the | 


“Corporate America doesn’t | 
appreciate strangers as much | 


Schlinkert, a senior vice presi- | 


Drake Beam Morin. “We are by | 
| “A euro-zone company has | 


denfeld, senior counsel at fast- 
food giant McDonald’s Corp. 
in Oak Brook, IIll., who said he 
plans to study the changes. 
The changes did satisfy 
some opponents. Instead of 
banning reverse-engineering, 
new language was included to 


Internet sites, such as Mon- | 
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Euro 


lyn Humphreys, “When you 
consider the of the 
changeover, this has gone re- 
markably well.” 

Longer lines at cash regis- 
ters due to slow and cumber- 
some point-of-sale conversion 


scale 


issues were just the first sign of | 


IT hiccups in the retail sector. 

Noel Hepworth, euro project 
director for the European Fed- 
eration of Accountants, an in- 
dustry trade group in Brussels, 
said almost one-third of euro- 

zone businesses have yet to 
| modify accounting and payroll 
| systems for the new currency. 


| to be able to draw up their pay- 
| roll in euros for the month of 


s will be honored only if received within 60 days 


ail toll-free (800) 552-4431. POSTMASTER: Send For 


| 
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UCITA banned it. But some have argued that reverse-engi- 
neering for security improvements should also be allowed. 


® Make it clear that UCITA is trumped by state consumer pro- 
tection laws. Opponents remain concerned about the potential 
use of UCITA to shift liability to end users. 


allow it for system interoper- 
ability. That change puts UCI- 
TA on par with European law. 
“We would no longer oppose 
UCITA’ with the new wording, 


| said Jonathan Band, counsel 


for the American Committee 
for Interoperable Systems in 
Washington. 


No Changes for Some 

However, a key issue that’s 
not addressed in the changes 
made to date is UCITA’s im- 
pact on licenses for shrink- 
wrapped software and soft- 
ware downloaded from the In- 


January,” said Hepworth. “If | 


they’ve not converted their 
payroll systems, you must do it 
manually. Can you imagine do- 
ing your payroll manually?” 
The true test of IT prepara- 
tions will come in the next few 
months, according to Nick 
Allen, an analyst at AMR Re- 


search Inc.’s London office. He | 


said software will be tested in 
the next three months as busi- 
nesses begin making out finan- 
cial reports. 

“The biggest risk in informa- 
tion systems is data pollution. I 


think that a good proportion of 


companies will have some de- 
gree of data pollution because 
it’s so difficult to make sure 
everything you own has been 
converted correctly,” Allen 
said. 

Sarwar A. Kashmeri, CEO of 
ebizChronicle.com Inc. in New 
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ternet, or so-called click-wrap 
software. A major intent of 
UCITA is to make these con- 
tracts enforceable. Opponents 
say the law will still allow ven- 
dors to institute restrictive 
contract terms. 

“It doesn’t seem to us that 
[the changes] represent the 
kind of big compromise that 
it’s being touted as,” said Miri- 
am Nesbit, legislative counsel 
for the Chicago-based Ameri- 
can Library Association, who 
speaking for the 
coalition of opponents. 

UCITA does more than 
make click-wrap and shrink- 


was also 


| wrap agreements enforceable, 


say opponents. It requires a 


| business to meet a legal stan- 


dard of unconscionability — 
something that is extremely 
overreaching and shocking to 
the conscience — to success- 
fully challenge a contract term, 


said Principal Financial’s Mc- 


Donald. 
If UCITA is widely adopted, 


end users will be required to 
| negotiate 


these agreements, 
something that will increase 
costs, said Randy Roth, Princi- 
pal Financial's director of pur- 
chasing. D 


York, said the complexity of 
the problem can change from 
country to country. For exam- 
ple, the euro is measured in 
decimal points, which 
for concern in 


is a 
cause some 
places. 

“Spain has never had a deci- 
mal point or fractions or cents. 
All of a sudden, all their cash 
registers have to be reporting 
[to back-end systems] and 
printing decimal points in 
cents,” Kashmeri said. 

European authorities had 
planned for a six-month transi- 
tion period — from January 
through June — during which 
both euros and national curren- 
cies could be used, but that 


grace period will now end Feb. 


28 instead. That, said Hep- 
worth, has added to the confu- 
sion of when everyone must 
deal only in euros. D 
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FRANK HAYES/FRANKLY SPEAKING 


Coming Retractions 


EPARTMENT OF CORRECTIONS: A few weeks back, I 

wrote about how virus problems at the U.S. District 

Court’s offices in Miami forced court personnel back 

into a technological Stone Age of paper, paper and 

more paper. I wrote that column two weeks before it 
ran and, as one reader recently pointed out to me, it left the unin- 
tended impression that the court office’s computers were still out of 
commission a month after the virus hit. They weren’t, and I sincere- 
ly apologize to the court’s IT staff for leading readers to that conclu- 
sion — and to readers for misleading them. 


Meanwhile, lots of news happened over Com- 
puterworld’s holiday hiatus. So, in an effort to 
get a jump on any corrections I may need to 
make when I comment on that news, here are 
some clarifications, corrections and revisions in 
advance that should help clear up any forth- 
coming confusion: 

g In writing about security holes in Windows XP — 
the ones Microsoft learned about on Oct. 29, 
four days after XP shipped, and didn’t tell any- 
one else about for more than seven weeks — I'll 
point out that in any other industry, continuing 
to sell millions of units of a product that the 
vendor itself admits is critically flawed would 
be cause for a huge class-action suit. 

I'll also suggest that by intenticnally exposing 
millions of XP users to a security flaw that will 
let crackers grab control of their new PCs, the 
actions of Microsoft executives are immoral, 
unethical and unconscionable. That statement 
will be unwarranted. They’re probably just in- 
competent. 

# When I write about the security hole in AOL In- 
stant Messenger’s latest version — the one that let 
bad guys grab control of a user’s PC through a 
feature designed to let users play 
games together online — I'll sug- 
gest that AOL’s programmers 
shouldn’t be copying the same 
boneheaded overflowing-buffer 
bugs that have caused so many of 
Microsoft’s security problems. That 
will be unfair. They’re probably not 
copying — just living down to the 
same standards of, um, quality. 

= If I write about the new worm called 
ZaCker and similar recent viruses 
that specifically target antivirus 
software, I’ll most likely describe 
their authors as grotesque, con- 


FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 





temptible morons without lives, morals or a 
shred of decency. That will be inaccurate. 
They’re not all morons. 

= Commenting on Apple CEO Steve Jobs’ salary 
of $1 a year plus a free $90 million jet, I’1l point out 
that Apple’s board decided to give Jobs the 
plane in January 2000, when Apple’s stock was 
flying high. Since then, Apple stockholders have 
lost most of their investment — including a 
stunning one-day plunge in September 2000 
that wiped out half their money. 

But when I suggest that Jobs isn’t worth $1 a 
year as Apple’s CEO, let alone a $90 million air- 
plane bonus, that will be wrong. Based on what 
he’s done with Apple in the five years since re- 
turning from exile, a buck a year is probably ex- 
actly what he’s worth. 

@ Writing about backers of UCITA who are now 
scrambling to drum up corporate support by chang- 
ing several of the proposed software licensing 
law’s provisions after meeting ferocious opposi- 
tion in state after state, I'll almost certainly refer 
to the UCITA proponents — who came up with 
the idea of booby-trapping software in case 
users decide not to upgrade — as self-destruc- 
tive weasels who would kill their 
customers as gladly as they would 
eat their young. This will be inap- 
propriate. Weasels don’t actually eat 
their young. 

# Finally, in commenting on security 
holes in Microsoft Windows XP, ME and 
98, Outlook, IIS and SQL Server, I'll un- 
doubtedly suggest that, in the face 
of e-terrorism, using bug-laden Mi- 
crosoft products now poses a na- 
tional security risk. That will be in- 
correct. Microsoft products repre- 
sent an international security risk. 

Glad I could clear all that up. d 


MAINTENANCE worker has his 
arms full of packages for IT de- 
partment, so he kicks open the 

| door to IT pilot fish's office. The 
door slams into a rack, and the 
DSL router smashes to the floor 
and begins to bellow smoke. 
“Well, that’s broken,” fish sighs. 
Maintenance guy replies, “How 
can you tell?” 


PROJECT MANAGER pilot fish 
in charge of point-of-sale sys- 
tems periodically inventories all 
POS terminals for his depart- 
ment-store chain. When one is- 
n't working, local techs have to 
fill out a form identifying the 
make, model, serial number and 
what's wrong - typically “power 
supply failure” or “printer mal- 
function,” says fish. But one re- 
sponse stands out, fish says: 


ative’ was written, ‘Fell off back 
of NCR truck, all over highway.’ ” 


RURAL TELECOMMUTER 

calls help desk - the satellite 
dish that’s his only link to the 
WAN isn't working. Tech pilot 





“Under ‘Reason for being inoper- 
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—____» 
fish runs through the usual diag- 
nostic checklist: “The dish is in 
good condition? No snow on it, 
no cows circling?” he asks. 
“Well, fella, lemme be honest,” 
says user. “I saw this four-point 
buck walking across my yard, 
and the thirty-aught-six was right 
there, so | dropped him.” Fish 
groans, “Through the dish?” 
“Yup,” user admits. 


PILOT FISH calls vendor tech- 
nical support after a fresh-out- 
of-the-box LCD monitor fails dra- 
matically. “Smoke poured out 
from the back of the monitor,” 
fish tells the tech support guy. 
Hmm, says support techie. “Did 
you plug it in and try to adjust the 
settings to verify it was bad?” 


Break the news to me: sharky@ 
computerworld.com. You 
can start the new year right with 
a sharp Shark shirt if your true 
tale of IT life sees print. And 
check out the fresh chum every 
day, along with a year’s worth 

of Sharkives on the Web at 
computerworld.com/sharky. 
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The 5th Wave 


“You know, this was a situation question 
on my Network+ exam, but I always 


thought it was jost hypothetical.” 
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April 2-5, 2002 


Marriott Desert Springs * Palm Desert, California 


¢ Original, largest, and proven Storage Networking forum dedicated tolTusers [Co owned & 
STORAGE . Produced by: 
e Sessions on IT planning, preparedness and data recovery y: 


NETWORKING ¢ Designed to equip storage solution buyers and users to gain maximum RO! | (QMPUTERWORLD 


| Featuring industry leaders, exciting panels, analyst updates, and a a 
50-company, industry-exclusive Interoperability Lab ~w S N | A 
> > 
e User case studies, tutorials, and CTO “chalk talk” sessions on topics such err 
as IP Storage, Virtualization and other new technologies See 


e Package includes an Expo (solution showcase], meals, receptions, and a 
complimentary (for users and implementers) golf outing 
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STORAGETEK 


For more information and to register, visit 


www,storagenetworkingworld.com or call 1-800-883-9090 
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WEB SITE 
TRAFFIC 





a 


You can’t have too much of a good thing. Unless you're talking 
Web transactions—and your network can’t handle the load. 
After Nabiscoworld.com launched, the site managers faced 
exactly this issue: too many visitors were arriving at the site. 
Which meant too many people were turned away. Unhappy. 
AT&T solved the problem. We re-architected the site to handle 
double the current monthly visits. And we added performance 


tracking and data-capture tools to squeeze out more usable 






WEB SITE 
TRAFFIC JAMS 


information. Result: Nabiscoworld.com receives 90% more visits. 
With no change in response time. And at greatly reduced cost. 
It’s proof that the right investment in your communications not 
only solves problems. It brings an immediate return. A return 

AT&T helps you realize. 


Got a traffic problem? AT&T can help you solve it. 


Results: Measurable. Possibilities: Boundless. 


<> 
Call AT&T toll free at | 866 346-9384 or visit us at www.attbusiness.com/return SS Atet 





